> Looks like someones been screwing with my box while I was dialed in.

Ouch. And while you were dialed in!

Out of interest:

You're sure it was while you were dialed in, or via some <xxx> you
accidentally put on your box somehow?

Were you dialed in through uni?

> Can anyone tell me what that x4 thing is?

You searched various security sites?

> I still need to work out how he got root.

Wouldn't *that* be the most important thing, to plug the hole and do the
tidying up? Do you think you can reliably find out what was done? If
not, you need to fdisk and install anyway.

What services were you running?

Volker

-- 
Volker Kuhlmann                 is possibly list0570 with the domain in header
http://volker.orcon.net.nz/             Please do not CC list postings to me.

Reply via email to