[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] RaQ4 - have I been hacked?



At 05:19 PM 2/28/2002, you wrote:
No user can log in using FTP - their passwords are rejected.
Passwords are working OK for POP and SSH - ie I can log in as any user
by SSH.
A few strange-looking files have appeared in /etc:

group-
gshadow-
passwd-
shadow-

Note the hyphens; the original files without hyphens are there as
well. Is this normal?
Would be very grateful for pointers/suggestions.

--

We all have those files.
Have you checked to see if FTP is turned off?