Re: how to find trace of attacks

["Dotan Cohen" <dotancohen@gmail.com>]

2008/12/31 Eduardo M KALINOWSKI <eduardo@kalinowski.com.br>:
> Abdelkader Belahcene wrote:
>> Thanks,
>>
>> I am simpler user on laptop, with ssh server running. Ther is no
>> important data on my laptop!!!
>>
>> Suddenly my Desktop  froze,
>> I changed the screen (CTRL+ALT+F1), I  noticed that I was logout, so
>> something jected me!!!
>> I restart the gdm, after that I continued normally.
>>
>> I never had this kind of problem, before I was  not connected directly
>> to  Internet, now I am. For this reason I doubt, moreover my  password
>> is not strong enough.
>>
>> Ok, Now I want to know where to find, any indication, if any, for
>> intrusion.
>>
>
> Could simply be a hardware or software program that caused your xserver
> to crash.
>
> Since there is no important data, I'd wipe out the system and reinstall.
> And pick a strong password.
>

If the licked up desktop and the apparent logout were the only
symptoms, then don't reinstall. An occasional x crash is not reason to
reinstall. Post the relevant log (and xorg config file) if it happens
again and let's diagnose it.

-- 
Dotan Cohen

http://what-is-what.com
http://gibberish.co.il

א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת
ا-ب-ت-ث-ج-ح-خ-د-ذ-ر-ز-س-ش-ص-ض-ط-ظ-ع-غ-ف-ق-ك-ل-م-ن-ه‍-و-ي
А-Б-В-Г-Д-Е-Ё-Ж-З-И-Й-К-Л-М-Н-О-П-Р-С-Т-У-Ф-Х-Ц-Ч-Ш-Щ-Ъ-Ы-Ь-Э-Ю-Я
а-б-в-г-д-е-ё-ж-з-и-й-к-л-м-н-о-п-р-с-т-у-ф-х-ц-ч-ш-щ-ъ-ы-ь-э-ю-я
ä-ö-ü-ß-Ä-Ö-Ü