Am I compromised?

From: Joe (sfjoe_at_spamcop.net)
Date: 11/29/03 

Date: Sat, 29 Nov 2003 11:36:11 -0800

I'm pretty sure my machine is compromised, but I'm not sure how to
proceed to correct the matter. The other day, chkrootkit reported that
the .bash_history file in /root had zero length. I'm assuming someone
deleted it to cover their tracks.
Unfortunately, I don't know where to proceed. Nothing appears to be out
of place. I downloaded and installed the latest version of chkrootkit and
it shows nothing besides that one anomaly. None of the logs show anything
unusual (that I can see).
Am I paranoid? Any suggestions on how to proceed? 

-- 
"The natural progress of things is for liberty to yield and government to 
gain ground"
     -- Thomas Jefferson

Relevant Pages

  • Re: Classical Music Mayhem!!
    ... and nowhere in Europe has a zip code as far as I am aware. ... think this is a matter to get too paranoid about, ... It's not a case of getting paranoid. ... The fact that you happily accept false info proves that it isn't necessary. ...
    (rec.music.opera)
  • RE: How to display IP of ssh user in message?
    ... If they never are able to successfully login then it won't matter if you ... - Have a warning banner enabled at log in. ... do a lastb and it logs it by, ... How to display IP of ssh user in message? ...
    (RedHat)
  • Managed Build
    ... I am supporting machine sthat have been built on a ... standard supplied by a Radia Server. ... I have received the following error no matter who logs in, ...
    (microsoft.public.win2000.general)
  • Re: factorial sequence proposal
    ... or even a positive one for that matter. ... I don't think the OEIS is as much paranoid as you state. ... standard submission form that Mr. Sloane has available for upload? ...
    (sci.math)
  • Re: Task Scheduler is hung in Win2K Pro!
    ... >| Task Scheduler is hung in Win2K Pro no matter who logs ... >| (administrator or not) or to domain or local login ...
    (microsoft.public.win2000.general)
Loading