Very Computer

Plz help? What am i looking for? suggestions?

I'd hate to have to reinstall it.. grr
Thanks..
Niels

Quote:> I am ruinning a redhat linux server with 2.2.14 kernel and ip_masq.
> I had it running for 5 months now, without a hitch.. Until now..
> When i try to log in at the console or via telnet, it says login incorect.
> So i thought passwords were messed up..
> But when in log into linuxconf or FTP, the passwords work ok.
> So what is going on? It is realy anoying me, cause I CAN'T LOG IN TO MY OWN
> BOX!

> Plz help? What am i looking for? suggestions?

The hacker certainly replaced /bin/login but your /etc/passwd file is
correct.

I had the same problem two years ago and some other files had been
replaced (can't remember which ones). You should reinstall your system.
In my case, the attack were done through bind. You should get the
earlier version if you use bind and still have an older version.

Fabrice.