My machine been hacked, I need help

anchor (sent by lists at
Sat Jan 14 10:27:47 PST 2006

Many thanks to all the replies. I need more time to understand them ;) 
I have taken off my machine from the internet to protect further damage. It takes me time to research it since I'm not that experienced in the system. The machine was hacked my my former system admin. But I need evidence. He put his machine IP into my rc.firewall file to allow him sudo. That's the only evidence I found. By the way, do sudo also leave logfile somewhere?

There is another problem: The hacker also changed something or maybe added a backend process to auto log me out within 1 minute idle. I checked .profile of my account and  the root acount. It very hard for to stay a screen and thinking, investigating, etc.
View this message in context:
Sent from the freebsd-hackers forum at

More information about the freebsd-hackers mailing list