Re: Is my system compromised

[Sergio Cuéllar Valdés <herrsergio@gmail.com>]

2006/2/3, Ben Meijering <ben@benspagina.cjb.net>:
> Searching for this last sentence I found all sorts of pages talking about
> compromised servers.
> So I downloaded chkrootkit, but this said my system was clean.
> Is there a chance my system is compromised?

Hi,

which services does your computer is running ?

ssh ?
web server ?
ftp?
telnet ?
smtp ?

Check your logs,  have you noticed extrange activity ?  Check your
/etc/passwd,  check with netstat your connection, make a nmap to see
your open ports.  List the content of /tmp

Find for new files that were created.

Cheers,
Sergio Cuellar

--------
http://biorobotics.fi-p.unam.mx