From owner-freebsd-security  Tue Jun 29  6: 4:36 1999
Delivered-To: freebsd-security@freebsd.org
Received: from critter.freebsd.dk (critter.freebsd.dk [212.242.40.131])
	by hub.freebsd.org (Postfix) with ESMTP id 2B88E1514E
	for <freebsd-security@FreeBSD.ORG>; Tue, 29 Jun 1999 06:04:32 -0700 (PDT)
	(envelope-from phk@critter.freebsd.dk)
Received: from critter.freebsd.dk (localhost [127.0.0.1])
	by critter.freebsd.dk (8.9.3/8.9.2) with ESMTP id PAA36176;
	Tue, 29 Jun 1999 15:04:20 +0200 (CEST)
	(envelope-from phk@critter.freebsd.dk)
To: "N.N.M" <madrapour@hotmail.com>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: A strange process 
In-reply-to: Your message of "Tue, 29 Jun 1999 06:01:32 PDT."
             <19990629130132.96757.qmail@hotmail.com> 
Date: Tue, 29 Jun 1999 15:04:19 +0200
Message-ID: <36174.930661459@critter.freebsd.dk>
From: Poul-Henning Kamp <phk@critter.freebsd.dk>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


Somebody is trying to break into your machine.

In message <19990629130132.96757.qmail@hotmail.com>, "N.N.M" writes:
>Hi everybody,
>
>Any knows what the following process can mean?
>
>login -p zzzzzzzz
>
>I have it in the result of "ps -aux" entry with the owner of "root". It also 
>re-appears in a moment after being killed by me! What can it be?
>
>
>Thanks,
>Nazila M.
>
>
>
>______________________________________________________
>Get Your Private, Free Email at http://www.hotmail.com
>
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-security" in the body of the message
>

--
Poul-Henning Kamp             FreeBSD coreteam member
phk@FreeBSD.ORG               "Real hackers run -current on their laptop."
FreeBSD -- It will take a long time before progress goes too far!


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message