[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] hacked RAQ
- Subject: [cobalt-users] hacked RAQ
- From: Jim Hagani <jhagani@xxxxxxxxxxx>
- Date: Tue Feb 27 14:43:07 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
My RAQ3 was hacked last week, and with the help of flash22, I got it
cleaned. I have been going through files or directories to find any clues of
what they did, and what they left behind.
Their signature is two files kofif\r and kofa\r. which are actually kofif?
and kofa?.
There is one directory that gives root "permission denied".
Any ideas what command to use to give root the ownership of this directory.
I just want to see what they have left behind.
Jim Hagani