Article View: aus.computers.linux
Article #54055Re: help....plzz
From: Wayne
Date: Mon, 01 Dec 1997 00:00
Date: Mon, 01 Dec 1997 00:00
20 lines
1349 bytes
1349 bytes
The only thing I can think of is a deamon file that allows him regardless or what root's password is to access the system. One I have found creates a fake login then mail the username and passwd to whoever wants it. For instance, he logs in under his name and starts the process. It captures all keystrokes (note there is a really good app under SCO that does this even better called spy) and echo's them to a file. Wayne da daf wrote in message <347fa93e.12098153@news.ioc.net>... >Hi, > > a person whom i had give telnet access on my linux 2.0.30 >server hacked root and then left a backdoor before i could get rid of >him. i got rid of his bdoor and all the lkr3 files that he had hidden >in my /tmp dir. he said i could close his back door by editing one >file. anyone know anything about it??
Technical Details
Message-ID:
<880975352.511178@sun.brisnet.org.au>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<347fa93e.12098153@news.ioc.net>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 102983,b1c2e7a4b0753c5b X-Google-Attributes: gid102983,public From: "Wayne" <wjackson@powerup.com.au> Subject: Re: help....plzz Date: 1997/12/01 Message-ID: <880975352.511178@sun.brisnet.org.au> X-Deja-AN: 294167705 References: <347fa93e.12098153@news.ioc.net> Cache-Post-Path: sun.brisnet.org.au!unknown@e020-234.st.net.au X-MimeOLE: Produced By Microsoft MimeOLE V4.71.1712.3 Organization: Soft-Tech Information Services Newsgroups: aus.computers.linux