Hi Thomas, > When browsing around web sites that I supposed were harmless > (en.wikipedia.org, some newspaper websites) I got crashes, plus > coredumps. The next morning, I got a message from my ISP that my > system had been used for sending out spam.
I am wondering if the browser exploit is how the attacker could have gotten access to your system. Did you look around the log files for traces of any suspicious activity? Did you reinstall since then? If not, please look for processes and scripts that might be related to sending spam (maybe look for files with timestamps around the time the attack took place). Do you have a public IP address and do you run any network servers? Do you happen to run any other network clients apart from Web browser, such as BitTorrent client or maybe an Instant Messenger? Thanks, -- Lubomir Kundrak (Red Hat Security Response Team) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
