[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Have I been hacked? and a solution



I have a qube3, I set it up. and FTPed our web site to the home/groups/home/web dir. 

Now, I tried to FTP a new file into one of my DIR's , error! access denied. I looked at the dir info, user "nobody" so I tried another thing, I renamed a dir to ****old it allowed me to do this and I uploaded a folder in its old name, it now has my "admin" on it. So I figured I would set up a "nobody" account , it says there already is a account called "nobody" it isnot in the list of users.

The only thing I can figure, is I had telnet on for about 12 hours and some one saw my logins? and went to town. 

But how the H*ll am I going to del the DIR's or reclaim them in my web folder!

Is there a root password (or superuser)I can log into ftp with and delete these "nobody" files and start over?

I don't care about the files in theweb DIR I have backup on our NT file servers. but I need control of them.

I am not a telnet or linux expert, So if any one can help, I may need some laid out instructions if it is ultra guru stuff.

Other wise I will use the restore disk if all else fails. 

Thank you,
Jason Ebacher