Date: Tue, 22 Jun 1999 20:44:40 -0400 (EDT) From: "System Admin." <pe@student.lssu.edu> To: Jerry Raynor <jerryr@ComCAT.COM> Cc: questions@FreeBSD.ORG Subject: Re: HELP HACKER!!! Message-ID: <Pine.GSO.4.05.9906222041070.7836-100000@student.lssu.edu> In-Reply-To: <Pine.GSO.4.02A.9906222003440.7244-100000@uw>
next in thread | previous in thread | raw e-mail | index | archive | help
Hello, you can start at looking all in the log files, the current log files and past (the backups). Search for binary files that has been modified lately. You can check on your software version such as wu-ftpd, sendmail, pop, imap, statd, and etc. Also take a look at www.cert.org. Good Luck. HTH pe' ------------------------------ UNIX System Admin. Distributed Computing Services Lake Superior State University 650 W. Easterday Ave. Sault Ste. Marie. MI 49783 USA. ------------------------------ On Tue, 22 Jun 1999, Jerry Raynor wrote: > I caught someone who had just got in and setup a user account!! hwo di I > find out how they got it???? This is my first encounter with this, what > steps should I take?? Thanks!! I'm useing FreeBSD-2.2.5-R I've changed > my password and root's password already > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.GSO.4.05.9906222041070.7836-100000>