OS2 breakin

[hermit1 <hermits () mac com>]

This morning I found out that someone somewhere apparently broke into an 
OS2 machine, created a user, started sendmail, and who knows what 
else.  There isn't anybody left here who knows about OS2, so I have a 
couple of questions.

Are there logs of system activity so I can find out how long ago the 
breakin happened?  Is there some way to find out when sendmail was started?

I am probably going to have the system owners format the disks, but I would 
like to know how the machine was compromised.

Any suggestions?

Thanks,
hermit1 
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards