Re: [cobalt-users] RE: Hacked? Telnet gone, SSH gone, strange ports open

["Gerald Waugh" <gerald@xxxxxxxxx>]

"d e p e u p l e u r" <jmurillo@xxxxxxxxxxxxxx>  wrote
> Thanks Gerald, we used to have SSH installed, but I am now looking for an
> earlier version because I cannot access the installed SSH and I cannot
> uninstall it from the GUI.  We had installed
> RaQ3-RaQ4-OpenSSH-Server-2.1.1p2 , version 2.5.2p2-1 will not install over
> it. Without access to the shell I cannot uninstall.  I am guessing maybe an
> earlier SSH might install and let us in.
 
Have you tried connecting to the serial port?
Have you tried moving the hard-drive to a Linux Desktop System?
mounting the partitions and viewing the files, not sure what good
this would do, except confirm that you were hacked.
Sorry, but the last resort is the "restore cd".
Gerald