Re: Xwindow "ghost"?
From: Larry I Smith (larryXiXsmith_at_verizon.net)
Date: 03/17/05
- Next message: Eric Hill: "Re: Adobe Reader 7.0 for Linux"
- Previous message: cujo: "Re: How to open links in same broswer session...?"
- In reply to: mjt: "Re: Xwindow "ghost"?"
- Next in thread: Larry I Smith: "Re: Xwindow "ghost"?"
- Reply: Larry I Smith: "Re: Xwindow "ghost"?"
- Reply: Geoff: "Re: Xwindow "ghost"?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Thu, 17 Mar 2005 16:11:25 GMT
mjt wrote:
> (Larry I Smith <larryXiXsmith@verizon.net>) scribbled:
>
>>>.... as we say in Texas, "He's got a big hole in his screen door." :)
>>>
>>>mtobler@stimpy:~> whois 220.154.236.183
>>>descr: Asia Pacific Network Information Center, Pty. Ltd.
>
>>There's no network activity, and I'm behind 2 firewalls
>>(one hardware and one software).
>>
>>Since this IP ALWAYS shows as the X IP for the currently
>>logged on user, and moves from user to user as I log off
>>then log on as a different user (via kdm), I'm thinking
>>that it is some kind of pseudo IP used by either X or KDE.
>>
>>If I've been 'invaded', how do I tell, and what can I
>>do about it?
> [snip]
>
>
> http://www.chkrootkit.org/
> http://www.rootkit.nl/
>
I ran both tools. Neither tool found anything.
I'm stumped...
Regards,
Larry
-- Anti-spam address, change each 'X' to '.' to reply directly.
- Next message: Eric Hill: "Re: Adobe Reader 7.0 for Linux"
- Previous message: cujo: "Re: How to open links in same broswer session...?"
- In reply to: mjt: "Re: Xwindow "ghost"?"
- Next in thread: Larry I Smith: "Re: Xwindow "ghost"?"
- Reply: Larry I Smith: "Re: Xwindow "ghost"?"
- Reply: Geoff: "Re: Xwindow "ghost"?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|