PDA

View Full Version : [ubuntu] I think I was hacked


tuddy24
October 10th, 2008, 10:20 AM
Hi all,

The title says it all. I think there might be a hole somewhere in Pidgin or somewhere. Let me explain the chain of events.

I wake up to find my screensaver frozen. Nothing let's me get out of it, three finger salute, CTL-ALT-BACKSPACE, nothing.

I physically reset the pc, jump in the shower, and come back to find that the pc is at some command prompt for some sound config. I wish I would've jotted it down but didn't.

Three finger salute works here and I watch the boot process to see what's going on. I boot ok into gnome and everythings ok. I open Pidgin which I always leave running and see someone on my buddy list that I did not invite. I delete him immediately and quit Pidgin. I've had people trying to buddy me before but I was able to deny them. Is it possible that somehow this person took over my system in some way? I never log in as root or anything, I sudo whenever I install something and that's it.

Concerned,

Pete

hyper_ch
October 10th, 2008, 10:22 AM
I don't think you were hacked - it rather sounds a problem with pidgin

Dr Small
October 10th, 2008, 01:08 PM
I agree with hyper_ch.

patrickballeux
October 10th, 2008, 09:24 PM
Hi tuddy24,

You lock-up could be caused by several things (last update could have changed something in your graphic card driver...).

I would suspect your 3d card and your screensaver to be the cause. But to be on the safe side, stop your pidgin, and let the computer opened for a whole day.

If it locks again, the you know it is not pidgin.

Also, have a look at your log files in /var/log/". I was hacked one day on my ftp server (I had forgot to change the password to something more complex than "admin/admin"...) These logs can be useful to detect unwanted login (of sudo retry...)

Do you have an ATI card? I have a glitch with OpenGL screesavers with my ATI x1200, so I simply select the "blank" screensaver to avoid any problem.

Let me know!

Drezard
October 10th, 2008, 10:46 PM
Sounds like you should wipe the computer! Put it back in the box! and send it back to the manufacturer!

tuddy24
October 12th, 2008, 08:16 PM
Hi patrickballeux,

The problem seemed to be my graphics card. While doing stuff inside windows the PC locked up in a similar way that happened in Ubuntu. I pulled the card out and cleaned a ton of dust off of it and put it back in. Who knows maybe there was a bad connection or something. I do know that my idle GPU temp dropped form 50 to 42C just from cleaning it. The only problem was all the lockups tore up my Ubuntu install and I had to reinstall it. I kept getting an error when booting that said my ext3 partition had errors that were not fixable. Once I got it reinstalled however it's worked without a hitch. I have heard that it's a good idea to seperate the ext3 partitions for this reason but am not sure which folders should have their own partition. I split my ext3 up into / and /home this time. Thanks for your help I appreciate it.

Pete

patrickballeux
October 14th, 2008, 03:42 AM
Yep, overheating can cause this kind of trouble. And the fact that you saw a temperature drop indicated that while doing some screensaver opengl activity, you was probably burning hot.

And when it's hot, it freezes... it's a known fact in computer land :)

Make sure also that there is a good ventilation in your PC (Have a look at your power supply also...)

Have a nice day!

airtonix
October 15th, 2008, 11:57 AM
you would be surprised at how well a millimetre of dust can prevent heat from disipating from your chips.

daleus
October 17th, 2008, 08:37 AM
Sounds like you should wipe the computer! Put it back in the box! and send it back to the manufacturer!

Ding Ding, here comes the ban-mobile.

pmlxuser
October 17th, 2008, 08:50 AM
sounds like you should wipe the computer! Put it back in the box! And send it back to the manufacturer!

bad advise!!!!

emecas
October 17th, 2008, 12:18 PM
HI all...

i don't know in what way "see someone on my buddy list that I did not invite" can be related with the graphic card or the chip set

I have experimented a similar situation some time ago in my accounts that i have used with pidgin ... I received messages from a unauthorized contact and I saw a contact that I did not accept in my contacts list.

if someone have a idea, i would like retake this part of tuddy24's post


thanks

Dr Small
October 17th, 2008, 02:00 PM
HI all...

i don't know in what way "see someone on my buddy list that I did not invite" can be related with the graphic card or the chip set

I have experimented a similar situation some time ago in my accounts that i have used with pidgin ... I received messages from a unauthorized contact and I saw a contact that I did not accept in my contacts list.

if someone have a idea, i would like retake this part of tuddy24's post


thanks
That sounds like Instant Message Spam:
http://ubuntuforums.org/showthread.php?t=943616

Kevbert
October 17th, 2008, 02:28 PM
Regarding dust - as well as overheating components, it can cause fan wear and can even be conductive. It's worth carefully giving the computer an internal clean once in a while with a vacuum cleaner.