From owner-freebsd-questions@FreeBSD.ORG  Wed Apr 14 07:39:42 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id F0C7616A4CE
	for <freebsd-questions@freebsd.org>;
	Wed, 14 Apr 2004 07:39:42 -0700 (PDT)
Received: from mail.elvandar.org (cust.94.120.adsl.cistron.nl [195.64.94.120])
	by mx1.FreeBSD.org (Postfix) with ESMTP id B571F43D31
	for <freebsd-questions@freebsd.org>;
	Wed, 14 Apr 2004 07:39:42 -0700 (PDT)
	(envelope-from remko@elvandar.org)
Message-ID: <407D4D2D.2000407@elvandar.org>
Date: Wed, 14 Apr 2004 16:39:41 +0200
From: Remko Lodder <remko@elvandar.org>
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Clint Gilders <techservices@onlinehobbyist.com>
References: <000001c421de$6c67ba10$0200a8c0@satellite>
	<407D4008.8080104@onlinehobbyist.com> <407D4555.7040400@elvandar.org>
	<407D4976.9030502@onlinehobbyist.com>
In-Reply-To: <407D4976.9030502@onlinehobbyist.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: by amavisd-new at elvandar.org
cc: freebsd-questions@freebsd.org
Subject: Re: have i been hacked?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Apr 2004 14:39:43 -0000

Clint,
> 
> I think you misread my message.  Did "moving all the accounts and 
> reinstalling"  imply that I didn't do a reinstall?  I simply copied over 
> known original programs so I could make my backup and do some postmortem 
> before reinstalling the system.   As you say, who knows what other 
> program were changed.  I wanted to use known good binaries.

My apologies, i indeed misread that part.
I read it as "Overwritten the binary's with versions from other systems 
before i wanted to reinstall" with me that implied that you did not 
reinstall.

Again, my apologies,

Good job to reinstall (:

> 


-- 

Kind regards,

Remko Lodder
Elvandar.org/DSINet.org
www.mostly-harmless.nl A Dutch community for helping newcomers on the 
hackerscene