View Full Version : Have I been hacked?
cacofonix
January 29th, 2005, 04:47 AM
I don't know if this is the right place as I'm using debian so if you guys could be nice and help me out I would really appreciate it :D.
I'm really worried about something that has happened recently. I have had menus and programs dissapear from the start menu, the shutdown option logs me out and doesn't shut down even though I have told it to shutdown in the kde options and now today I get this on my console. I have tried both rkhunter and chkrootkit and the output doesn't suggest anything is out of the ordinary I have a firewall up the only thing I have listening is dhcp and I have what I think are hard passwords to crack. am I worried about nothing or what?
cacofonix
mark
January 29th, 2005, 05:03 AM
It doesn't look real good...that PROMPT string is kinda scary. What kind of firewall are you running, hardware or software?
Mark
cacofonix
January 29th, 2005, 05:06 AM
The prompt is what worries me the most :-( I have a router that has a built in firewall and I'm using guarddog as well.
cacofonix
mark
January 29th, 2005, 05:15 AM
Hmm - I have a similar setup, except Firestarter instead of guarddog and I've not had anything at all like this. Then again, I have NO outward-facing ports exposed.
Not sure what to suggest. You might want to go to http://www.grc.com and navigate to the Shields Up! page to test for blatant vulnerabilities.
Quest-Master
January 29th, 2005, 06:11 AM
That is sort of scary 0_0
I think I should download a firewall too. I'm behind two routers though, it's almost impossible for anything to get through this connection XD
Yukonjack
January 29th, 2005, 06:44 AM
I don't know if this is the right place as I'm using debian so if you guys could be nice and help me out I would really appreciate it :D.
I'm really worried about something that has happened recently. I have had menus and programs dissapear from the start menu, the shutdown option logs me out and doesn't shut down even though I have told it to shutdown in the kde options and now today I get this on my console. I have tried both rkhunter and chkrootkit and the output doesn't suggest anything is out of the ordinary I have a firewall up the only thing I have listening is dhcp and I have what I think are hard passwords to crack. am I worried about nothing or what?
cacofonix
Go to Gibson Research (http://www.grc.com) and use ShieldsUp see if he can get in.
jdodson
January 29th, 2005, 06:58 AM
I don't know if this is the right place as I'm using debian so if you guys could be nice and help me out I would really appreciate it :D.
I'm really worried about something that has happened recently. I have had menus and programs dissapear from the start menu, the shutdown option logs me out and doesn't shut down even though I have told it to shutdown in the kde options and now today I get this on my console. I have tried both rkhunter and chkrootkit and the output doesn't suggest anything is out of the ordinary I have a firewall up the only thing I have listening is dhcp and I have what I think are hard passwords to crack. am I worried about nothing or what?
cacofonix
do you have any friends that can access your machine? perhaps it is a friend playing a joke on you. if not, backup your files and unplug the box. check your system access logs and see whats up. my guess if you have been compromised then they might have covered thier tracks. however, they might not have.
cacofonix
January 29th, 2005, 08:17 AM
Go to Gibson Research and use ShieldsUp see if he can get in
I went there and got scanned I had some stealthed ports but most of them were closed (I think its scanning the router and not me)
do you have any friends that can access your machine? perhaps it is a friend playing a joke on you. if not, backup your files and unplug the box. check your system access logs and see whats up. my guess if you have been compromised then they might have covered thier tracks. however, they might not have.
I don't think its a friend playing tricks on me, they all use windows and I don't think they know anything about running linux.
cacofonix
Jad
January 29th, 2005, 10:04 AM
Salam,
Try Sygate Tech online scan
http://scan.sygatetech.com/
Powered by vBulletin® Version 4.2.2 Copyright © 2024 vBulletin Solutions, Inc. All rights reserved.