From owner-freebsd-questions  Sat Aug 11 14:50:57 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from femail26.sdc1.sfba.home.com (femail26.sdc1.sfba.home.com [24.254.60.16])
	by hub.freebsd.org (Postfix) with ESMTP id 7D6DE37B408
	for <freebsd-questions@FreeBSD.ORG>; Sat, 11 Aug 2001 14:50:52 -0700 (PDT)
	(envelope-from genisis@istar.ca)
Received: from x1-6-00-50-ba-de-36-33.kico1.on.home.com ([24.141.119.162])
          by femail26.sdc1.sfba.home.com
          (InterMail vM.4.01.03.20 201-229-121-120-20010223) with ESMTP
          id <20010811215051.KRGS24265.femail26.sdc1.sfba.home.com@x1-6-00-50-ba-de-36-33.kico1.on.home.com>
          for <freebsd-questions@FreeBSD.ORG>;
          Sat, 11 Aug 2001 14:50:51 -0700
Received: from localhost (genisis@localhost)
	by x1-6-00-50-ba-de-36-33.kico1.on.home.com (8.11.3/8.11.3) with ESMTP id f792Fkr87703;
	Wed, 8 Aug 2001 22:15:47 -0400 (EDT)
	(envelope-from genisis@istar.ca)
X-Authentication-Warning: x1-6-00-50-ba-de-36-33.kico1.on.home.com: genisis owned process doing -bs
Date: Wed, 8 Aug 2001 22:15:46 -0400 (EDT)
From: Dru <genisis@istar.ca>
X-X-Sender:  <genisis@x1-6-00-50-ba-de-36-33.kico1.on.home.com>
To: =?iso-8859-1?q?Keith=20Spencer?= <bsd2000au@yahoo.com.au>
Cc: fbsd <freebsd-questions@FreeBSD.ORG>
Subject: Re: Yep-I been hacked! Whats psyBNC? Someone installed it
In-Reply-To: <20010809015927.36963.qmail@web12007.mail.yahoo.com>
Message-ID: <20010808221333.M87684-100000@x1-6-00-50-ba-de-36-33.kico1.on.home.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG



On Thu, 9 Aug 2001, [iso-8859-1] Keith Spencer wrote:

> Hi all,
> I am on the trail here.
> I know zero about security (almost)
> But I found in a user dir all this stuff and lloking
> in the .bash_history for the user I find the stuff
> below. I am no genius but I figure I can see some
> seriously nasty stuff here!
> Can someone help me make sense of it?
<snip>

Hi Keith,

Looks like all the nasty details of what happened to you are covered at
the psybnc tutorial site:

http://www.netknowledgebase.com/tutorials/psybnc.html

HTH,

Dru


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message