Hi,

Not sure if this helps anyone but so far I have found:

/var/log/message -> /dev/null
/var/log/wtmp -> /dev/null

They also created an HTML page called services.html and in it:

"YOU WERE HACKED!!!Welcome to ParadoX's Web`s Page"

there is also a whole load of other crap (some in Spanish/French or similar)

I am just about to re-install the OS

dan
----- Original Message -----
From: "Michael Lake" <[EMAIL PROTECTED]>
To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
Sent: Wednesday, July 09, 2003 10:34 AM
Subject: Re: [SLUG] Linux box hanging on startup


> Dan Banyard wrote:
> > Just found the problem - it seems some nice individual has hacked into
the
> > machine.  I found they have added HTML files announcing this fact.  This
> > explains the strange behaviour.  So who knows what they have done to the
> > system.
>
> Thats quite nice of them. They are polite enough to tell you rather than
> leaving you in the dark and having back doors and things :-) What did
> they say in the HTML?
>
> Mike
> --
> Mike Lake
> Uni of Technol., Sydney
>
>
>
> UTS CRICOS Provider Code:  00099F
>
> DISCLAIMER
> ========================================================================
> This email message and any accompanying attachments may contain
> confidential information.  If you are not the intended recipient, do not
> read, use, disseminate, distribute or copy this message or attachments.
> If you have received this message in error, please notify the sender
> immediately and delete this message. Any views expressed in this message
> are those of the individual sender, except where the sender expressly,
> and with authority, states them to be the views the University of
> Technology Sydney. Before opening any attachments, please check them for
> viruses and defects.
> ========================================================================
>
>
>
> --
> SLUG - Sydney Linux User's Group - http://slug.org.au/
> More Info: http://lists.slug.org.au/listinfo/slug
>

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Reply via email to