My FC3 machine appears to be compromised, please help

[Mike McCarty]

Bob Brennan wrote:

[snip]

> expert to remember where to start on this type of thing. Wiping the
> machine and starting over is not a good option, and yes I had rsynced
> everything important to an FC4 machine only hours before this
> happened.

[snip]

If you really are compromised, then you only have two options

(1) continue to run compromised, but hope to mitigate damages
(2) reload

Once a system has been compromised, it can never be considered
clean again until it is reloaded.

Mike
-- 
p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);}
This message made from 100% recycled bits.
You have found the bank of Larn.
I can explain it for you, but I can't understand it for you.
I speak only for myself, and I am unanimous in that!