>>From everyone's advice, I found that the hacker had replaced the login
>binaries and was having passwords stored in /dev/ttypx. Several programs
>had been modified as well. Everything has been fixed / updated and
>passwords
>changed. Now I'm moving forward to setting up a firewall and all that fun
>stuff =)
Interesting, there wasn't a /dev/ttypx on my system. I have a copy of the
complete system still on line in a backup area.
MB
--
e-mail: [EMAIL PROTECTED]
Bart: Hey, why is it destroying other toys? Lisa: They must have
programmed it to eliminate the competition. Bart: You mean like
Microsoft? Lisa: Exactly. [The Simpsons - 12/18/99]
Visit - URL:http://www.vidiot.com/ (Your link to Star Trek and UPN)
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.
