From owner-freebsd-questions Fri Jul 27 21:34: 8 2001 Delivered-To: freebsd-questions@freebsd.org Received: from central.ajboggs.com (central.ajboggs.com [209.69.173.4]) by hub.freebsd.org (Postfix) with ESMTP id 5B7A537B403 for ; Fri, 27 Jul 2001 21:34:06 -0700 (PDT) (envelope-from russell@ajboggs.com) Received: (from nobody@localhost) by central.ajboggs.com (8.11.4/8.11.4) id f6S4bwP07678 for freebsd-questions@FreeBSD.ORG; Sat, 28 Jul 2001 00:37:58 -0400 (EDT) From: "Russell J. Lahti" To: freebsd-questions@FreeBSD.ORG Subject: Re: URGENT - Seems like i've been hacked... what to do now? Message-ID: <996295078.3b6241a6975cf@www.ajboggs.com> Date: Sat, 28 Jul 2001 00:37:58 -0400 (EDT) References: <20010728041944.9507.qmail@web20103.mail.yahoo.com> In-Reply-To: <20010728041944.9507.qmail@web20103.mail.yahoo.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit User-Agent: A.J. Boggs & Company Webmail X-Originating-IP: 24.179.171.140 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Quoting Bsd Newbie : > > I saw something about a telnetd security hole... could > that have been used against me? > If you had telnetd going, then yes. you probably were hacked. Format the system. There's no way you'll find all the trojans that were put in place, and even if you do, it would be faster and easier to do a re-install. Change all of your passwords that you use, because they could have easily been captured. And when you're done.. be sure to disable telnetd :) -Russell To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message