Date: 19 Apr 2001 11:31:26 +0200 From: Dag-Erling Smorgrav <des@ofug.org> To: "David G. Andersen" <dga@pobox.com> Cc: kris@obsecurity.org (Kris Kennaway), fukuda@alles.ad.jp (fukuda shinichi), freebsd-security@FreeBSD.ORG Subject: Re: unknown process Message-ID: <xzpzodd6xsh.fsf@flood.ping.uio.no> In-Reply-To: <200104190324.VAA14081@faith.cs.utah.edu> References: <200104190324.VAA14081@faith.cs.utah.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
"David G. Andersen" <dga@pobox.com> writes: > You've been hacked. Do what Kris said immediately - take your > system offline, and figure out how they got in. You'll likely > need to either restore from backups, a fresh install, or check > your tripwire/etc logs to determine what else the intruder > changed, if they installed a rootkit, etc. It's not either/or. The only acceptable solution to this situation is a complete reinstall from a trusted source (e.g. original CD set). DES -- Dag-Erling Smorgrav - des@ofug.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzpzodd6xsh.fsf>