Have I been hacked? Shadow file deleted

[Marc M]

Try running chkrootkit and rkhunter

On 9/8/05, STYMA, ROBERT E (ROBERT) <stymar at lucent.com> wrote:
> 
> >
> > Hello,
> >
> > I installed a new server on Tuesday using Fedora Core 4 and
> > today the shadow
> > file was deleted three times. Since nothing was being done on
> > the box at
> > those times, I believe I was hacked.
> >
> Since it is a new install, I would look into running the
> badblocks command just to be safe. There is always the chance
> something is wrong with the disk where the inode for the shadow
> file is stored. This is a long shot, but easy to do.
> 
> Bob Styma
> 
> --
> fedora-list mailing list
> fedora-list at redhat.com
> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20050908/00ecd058/attachment-0001.htm>