From owner-freebsd-stable Mon Dec 2 16: 2:43 2002 Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8DE1237B401 for ; Mon, 2 Dec 2002 16:02:42 -0800 (PST) Received: from smtpout.mac.com (smtpout.mac.com [17.250.248.86]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2FBD743EB2 for ; Mon, 2 Dec 2002 16:02:42 -0800 (PST) (envelope-from cswiger@mac.com) Received: from asmtp02.mac.com (asmtp02-qfe3 [10.13.10.66]) by smtpout.mac.com (Xserve/MantshX 2.0) with ESMTP id gB3031OC007991 for ; Mon, 2 Dec 2002 16:03:02 -0800 (PST) Received: from bust ([12.38.161.88]) by asmtp02.mac.com (Netscape Messaging Server 4.15) with ESMTP id H6IO4H00.425; Mon, 2 Dec 2002 16:02:41 -0800 Date: Mon, 2 Dec 2002 19:02:46 -0500 Subject: Re: psybnc and IRC hack Content-Type: text/plain; charset=US-ASCII; format=flowed Mime-Version: 1.0 (Apple Message framework v482) Cc: freebsd-stable@freebsd.org To: Wayne M Barnes From: Chuck Swiger In-Reply-To: <20021202175505.A1525@klentaq.com> Message-Id: <8D82F5D2-0652-11D7-A8AC-000A27D85A7E@mac.com> Content-Transfer-Encoding: 7bit X-Mailer: Apple Mail (2.482) Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Monday, December 2, 2002, at 06:55 PM, Wayne M Barnes wrote: > What is "an IRC bouncer"? Is it something I can use to protect > against this hijack of my system? "psybnc" stands for something like "PSYchotic irc BouNCer", although my memory is imperfect. I believe it's used to offer filesharing of warez via private IRC channels, using your machine's diskspace and network connectivity. It was almost certainly installed by whoever cracked your machine; quite probably there will be a rootkit which has been installed as well. > I am running recent FreeBSD 4.7. Please try to figure out what vulnerability your machine was compromised by. Security problems which affect the current release version are of a high priority. -Chuck Chuck Swiger | chuck@codefab.com | All your packets are belong to us. -------------+-------------------+----------------------------------- "The human race's favorite method for being in control of the facts is to ignore them." -Celia Green To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message