Hi
Most probably(definitely...?) your system is rooted. Reinstall ans secure if
you can afford, after backing up your data. Doing postmortem on it may prove to
be a laborious job...
I am sure you will get much better suggestions than this. But for sure, you are
heading to a war time on server security front....
And this is no virus. Some live soul is playing over there....
Shridhar
Simanta J Handique wrote:
>
> Hi all,
>
> I was scanning my mail queue today when i came across a mail which was going
> to "[EMAIL PROTECTED]"... The mail consisted of the output from the ifconfig
> command (which showed the IP address i was using when i was connected to
> VSNL), the entire /etc/passwd file and also the SHADOW PASSWORD file.
> Luckily the mail did not go out (or so i think). Is this a virus or
> something? And how did it get access to the files which can be accessed by
> root only. How can i stop it?
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/linux-india-help
