Date: Mon, 18 Dec 2000 19:58:44 +0100 (MET) From: Mark Lastdrager <mark@pine.nl> To: "Zaitsau, Andrei" <AZaitsau@panasonicfa.com> Cc: <net@FreeBSD.ORG> Subject: Re: Hacked computer Message-ID: <Pine.GSO.4.30.0012181955250.8573-100000@atro.pine.nl> In-Reply-To: <054F7DAA9E54D311AD090008C74CE9BD01F1E7CB@exchange.panasonicfa.com>
next in thread | previous in thread | raw e-mail | index | archive | help
At Mon, 18 Dec 2000, owner-freebsd-net@FreeBSD.ORG wrote: >Hello everyone, >I have a problem, in the morning someone hacked into my computer at home. It >is ADSL Gateway running FreeBSD 3.4 , root password is changed by hacker. >Can anyone tell where on the system I can find some tracks of a hacker? >What should I check first? >Which log files? >Anyone? Please? >Thanks. Check this excellent document: http://www.cert.org/nav/recovering.html And please ask your question again on the incidents mailinglist (http://www.securityfocus.com/forums/incidents/intro.html) as it's offtopic here IMHO. Mark Lastdrager -- Pine Internet BV :: tel. +31-70-3111010 :: fax. +31-70-3111011 PGP 92BB81D1 fingerprint 0059 7D7B C02B 38D2 A853 2785 8C87 3AF1 Today's excuse: Well fix that in the next (upgrade, update, patch release, service pack). To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.GSO.4.30.0012181955250.8573-100000>