> Oh well, I think I might be in trouble again. I am running "top" on my
> computer and see a program called "eggdrop" by user "gdm" is running
> pretty actively for a while. I do not remember myself starting this
> program. My other computers with similiar setup do not show this program.
Is this computer for your own use only? Do any other people have access to
it? (Root or otherwise)
> After an internet search, eggdrop is a IRC bot. Would it be possible that
> it is sneaking my password to someone?
It might be... not sure though. Try to see if you can find the
configuration for it. (I've never dealt with eggdrop before, but I'm
assuming it's gotta have a conf file somewhere. At least see where the
program is installed and see if there's any associated files.) I do know
eggdrop is notorious for eating up resources.
> I cannot kill it (it restarts after kill). Could anyone tell me how to get
> rid of it and secure my computer? How can I estimate how far the hacker
> get into my computer? What is the user "gdm" for, anyways?
Have you tried 'killall eggdrop'? It might be running as a daemon. See
what 'ps auxwww | grep eggdrop' gives you. The user gdm is for the Gnome
Display Manager, apparently. It could be that your Gnome DM configuration
file got compromised to run eggdrop.
> Thanks
> Michael
HTH,
MZhang
---------------------------------------------------------------------------
Send administrative requests to [EMAIL PROTECTED]
