Re: [cobalt-users] RaQ4 - have I been hacked?

[James Dean Young <jd@xxxxxxxxxxxx>]

> I *have* been hacked.

Hmmm, you just found out for the first time YESTERDAY, that the 
passwd- and other hyphen files were normal, but yet you are SO SURE 
you have been hacked? How so?

> I desperately and urgently need suggestions as to how I can either:
>
> 1. Get FTP working again temporarily

A pretty vague question gets a pretty vague answer...maybe :-)

But seriously, if I can log into a box via ssh, I can bring ANYTHING 
back up ;-)

> 2. Find another method to download large amounts of data
>
> so I can move users' sites to another server (should only take all
> night if I'm lucky and I'm only working a ten-hour shift tomorrow)

SSH into your box. tar the files, then see if you can sftp out of 
your box to the other.

> A very bitter Eddie Bishop

Don't be bitter, work the machine, don't let it work you! ;-)
--

-
   James Dean Young
  www.sundream.com
   jd@xxxxxxxxxxxx

"Sometimes you get shown the light, in the strangest of places if you 
look at it right"
   - Robert Hunter