[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: how to find trace of attacks

2008/12/31 Eduardo M KALINOWSKI <eduardo@kalinowski.com.br>:
> Abdelkader Belahcene wrote:
>> Thanks,
>> I am simpler user on laptop, with ssh server running. Ther is no
>> important data on my laptop!!!
>> Suddenly my Desktop  froze,
>> I changed the screen (CTRL+ALT+F1), I  noticed that I was logout, so
>> something jected me!!!
>> I restart the gdm, after that I continued normally.
>> I never had this kind of problem, before I was  not connected directly
>> to  Internet, now I am. For this reason I doubt, moreover my  password
>> is not strong enough.
>> Ok, Now I want to know where to find, any indication, if any, for
>> intrusion.
> Could simply be a hardware or software program that caused your xserver
> to crash.
> Since there is no important data, I'd wipe out the system and reinstall.
> And pick a strong password.

If the licked up desktop and the apparent logout were the only
symptoms, then don't reinstall. An occasional x crash is not reason to
reinstall. Post the relevant log (and xorg config file) if it happens
again and let's diagnose it.

Dotan Cohen



Reply to: