From owner-freebsd-security Tue Nov 13 9:22:38 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail6.speakeasy.net (mail6.speakeasy.net [216.254.0.206]) by hub.freebsd.org (Postfix) with ESMTP id 1DAA037B405 for ; Tue, 13 Nov 2001 09:22:35 -0800 (PST) Received: (qmail 15754 invoked from network); 13 Nov 2001 17:22:00 -0000 Received: from unknown (HELO laptop.baldwin.cx) ([64.81.54.73]) (envelope-sender ) by mail6.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 13 Nov 2001 17:22:00 -0000 Message-ID: X-Mailer: XFMail 1.4.0 on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <5.1.0.14.2.20011114000437.02050a70@MailServer> Date: Tue, 13 Nov 2001 09:22:33 -0800 (PST) From: John Baldwin To: Stefan Probst Subject: RE: Adore worm Cc: Rob Hurle , freebsd-security@FreeBSD.ORG Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On 13-Nov-01 Stefan Probst wrote: > Good Evening, > > sorry for newbie-posting, but I don't have too much time to sift through > archives.... > > Looks like my FreeBSD 4.2 Box (FreeBSD 4.2-RELEASE (GENERIC)) got hit by a > worm - or infested by purpose: It's a rootkit, and your box has been compromised. Backup your data and reinstall unless someone else has a better idea. -- John Baldwin -- http://www.FreeBSD.org/~jhb/ "Power Users Use the Power to Serve!" - http://www.FreeBSD.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message