Re: ftp warez server snake ?

[Peter Moody <peter () ucsc edu>]

> There is also an auth server listening, providing me this:
>
> # nc 194.xx.x.xxx 113
>
>  : USERID : UNIX : ekwaxtjm

Auth server returning garbage date = Compromise, especially when not
prodded.  I'd provide you with the nessus plugin that explains this but
it looks like tennable has destroyed what used to be a useful nessus.org
website.

Short answer, the machine is owned and should be format/reinstall
treatment.

Regards,
-Peter
-- 
Peter Moody                             <peter () ucsc edu>
Information Security Administrator          831/459.5409
Information and Technology Services        UC Santa Cruz
http://security.ucsc.edu/pgp/peter.moody.pub      AS5739
:wq

Attachment: signature.asc
Description: This is a digitally signed message part