Date:  Wed, 19 Jul 2006 17:55:52 +0200
From:  Steffan <snoord (at mark) planet.nl>
Subject:  [coba-e:06056] Re: vunerable
To:  coba-e (at mark) bluequartz.org
Message-Id:  <005b01c6ab4b$cfecb010$9a00000a@pc11>
In-Reply-To:  <44BDD8DE.5080209 (at mark) virtbiz.com>
X-Mail-Count: 06056

We also
But it stopped after a couple hours
 what for command did you use to find the changed files



Dennis wrote:
> Suddenly I get this admin messages:
> 
> chown root:root /dev/shm/nice2k && chmod 4755 /dev/shm/nice2k && rm -rf 
> /etc/cron.d/core && kill -USR1 3286
> 
> chown: cannot access `/dev/shm/nice2k': No such file or directory
> 
> it seems that someone 'broke' into my system, but how to see what 
> happened and where ..
> dennis
> 
> 
>