From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1IYfmY-00088j-C0 for garchives@archives.gentoo.org; Fri, 21 Sep 2007 10:30:46 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.14.1/8.14.0) with SMTP id l8LAKdkI011352; Fri, 21 Sep 2007 10:20:39 GMT Received: from rv-out-0910.google.com (rv-out-0910.google.com [209.85.198.191]) by robin.gentoo.org (8.14.1/8.14.0) with ESMTP id l8LAG4xv006203 for ; Fri, 21 Sep 2007 10:16:05 GMT Received: by rv-out-0910.google.com with SMTP id b22so725227rvf for ; Fri, 21 Sep 2007 03:16:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=rxG1IGyZQdLf7cmXEHVAlg5nlbPzap6CF/kwwQdtt70=; b=SKQmpe35fvct9oqZEAAFG2zRL2T/mxEJGWwlQz8gZRVxRZtUOjky2genr2fchJffzsJpsnKgixqU5ClNjXrPqB2mdfRcFkWH53l3MdfW99MjEvQ64oyzxSE3B1EZODZzfmIP6bTzl6CcuaKkpVMreWGEFtJyld8hJchk3LATX40= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=pJsgemor9/vpEzgEP4mNtSNFs3n5JW0Wcp8RhOKGEKDVkf3yLejFq56E07JOfCbZygsV4dBbj+yMvjlMUPXuf/j9D+tyeLx7pf3awPPaeG9BMPhsHObhmU58uLcHVLvKmzd1bwpZDneufPDlI5iZ8h9ntT6XY0Ew+RERRPoEm10= Received: by 10.114.197.1 with SMTP id u1mr3323472waf.1190369764303; Fri, 21 Sep 2007 03:16:04 -0700 (PDT) Received: by 10.115.110.15 with HTTP; Fri, 21 Sep 2007 03:16:04 -0700 (PDT) Message-ID: <49bf44f10709210316i65dae73w2195e7dc95dd7e50@mail.gmail.com> Date: Fri, 21 Sep 2007 03:16:04 -0700 From: Grant To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Hacked by association? In-Reply-To: <200709192201.49250.volker.armin.hemmann@tu-clausthal.de> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <49bf44f10709191109x58494aa3n3182cea59553d510@mail.gmail.com> <200709192201.49250.volker.armin.hemmann@tu-clausthal.de> X-Archives-Salt: ee513e53-7049-4581-9571-4559ce5a9833 X-Archives-Hash: 699842fca4f3968964244f2ca7334c8c > > Do I > > need to start this thing over? > > yes. No tool can tell you for certain, that no malware is rampage on your > system. netstat, ps, emerge might be hacked already. As might be md5sum and > other tools to generate and compare ckecksums. There is only one way to make > sure your system is clean: > > reinstallation Although I haven't found any evidence of intrusion, I've been urged off-list to reinstall and since I'm about 4 hours early to rise this morning I think I better. Can we go over a good plan for the transition? My main concerns are backing up the right files and a good remote installation procedure as it's been years since I did that. Thanks. - Grant -- gentoo-user@gentoo.org mailing list