RE: [cobalt-users] "Sort of" hacked?? Raq3 with some problems...

[Rodolfo Paiz <rpaiz@xxxxxxxxxxxxxx>]

> Ok, checking my files against those found in other posts,
> I've discovered that while my login, ls, netstat,  ps, du
> and find commands seem to be "new and unproved," others
> appear untainted (checked via Md5 checksums)

There are many different types and kinds of hacks; you'll never have
*all* the symptoms mentioned in different stories. But the fact that
someone got into your machine at all is what should interest you.

Get back into your machine however you can, make a full backup of your
stuff if you have to (but you were smart and had it beforehand, right?)
then reinstall your entire machine and try to make it more secure next
time.

--
Rodolfo J. Paiz
rpaiz@xxxxxxxxxxxxxx <mailto:rpaiz@xxxxxxxxxxxxxx>