Re: More potato->woody upgrade problems...

[Turbo Fredriksson <turbo@debian.org>]

>>>>> "Matthew" == Matthew Garrett <mgarrett@chiark.greenend.org.uk> writes:

    Matthew> In chiark.mail.debian.devel, you wrote:
    >> meduza:/var/cache/apt/archives# chown root.root /bin/* chown:
    >> /bin/login: Operation not permitted

    Matthew> Does chattr -i /bin/* help?

It did.

And I've found evidence that I've been hacked! I found a file that
was named /plasmatik.tar.gz and a directory /plasmatik with the the 
content of:

----- s n i p -----
./.sh
./.sh/ssh_host_key
./.sh/ssh_host_key.pub
./.sh/ssh_random_seed
./.sh/shdcf2
./.sh/sshd
./ssh
./setup
./bin
./bin/ssh.tgz
./bin/pg
./bin/sz
./bin/encrypt
./bin/ssh-only.tgz
./bin/.sh
./conf
./lib
----- s n i p -----
-- 
nitrate Ft. Bragg Serbian 767 counter-intelligence Cuba World Trade
Center explosion colonel DES munitions president genetic FBI Saddam
Hussein
[See http://www.aclu.org/echelonwatch/index.html for more about this]