Re: password help

[Keith Mastin <kmastin beechtree ca>]

On Mon, 21 Oct 2002, Gregory Malsack wrote:

> Hi All,
> 
> 	Some one with nothing better to do hacked into one of my mom & pop
> customers FTP server using a program called SucKIT. In case you haven't
> heard of this before, I highly recommend looking it up at phrack.org and
> learning about it. I've even uploaded the README file if you would like. It
> talks about ways to safeguard yourself from this type of attack. Anyways,
> can anyone tell me how to change the root password back to what it was? So
> we can log in and get things fixed?

How do you suppose to "fix" this machine? Someone already did that. I 
suggest a complete new install after a disk format of all partitions, new 
"hard" passwrods and more security on the ftp server in the future.

You have been root kitted. This is the most intrusive of attacks, and your 
entire system is up for grabs. There are undoubtedly programs running that 
are hidden deeply within other programs, replaced binaries and all sorts 
of fun and games going on behind the scenes.