On Mon, 10 Apr 2000, Mengmeng Zhang wrote:
> > Oh well, I think I might be in trouble again. I am running "top" on my
> > computer and see a program called "eggdrop" by user "gdm" is running
> > pretty actively for a while. I do not remember myself starting this
> > program. My other computers with similiar setup do not show this program.
>
> Is this computer for your own use only? Do any other people have access to
> it? (Root or otherwise)
>
> > After an internet search, eggdrop is a IRC bot. Would it be possible that
> > it is sneaking my password to someone?
>
> It might be... not sure though. Try to see if you can find the
> configuration for it. (I've never dealt with eggdrop before, but I'm
> assuming it's gotta have a conf file somewhere. At least see where the
> program is installed and see if there's any associated files.) I do know
> eggdrop is notorious for eating up resources.
>
> > I cannot kill it (it restarts after kill). Could anyone tell me how to get
> > rid of it and secure my computer? How can I estimate how far the hacker
> > get into my computer? What is the user "gdm" for, anyways?
>
> Have you tried 'killall eggdrop'? It might be running as a daemon. See
> what 'ps auxwww | grep eggdrop' gives you. The user gdm is for the Gnome
> Display Manager, apparently. It could be that your Gnome DM configuration
> file got compromised to run eggdrop.
>
> > Thanks
> > Michael
eggdrops are usually run through crontabs. check that, and then kill
it.
RHP
--
Richard H. Pistole - [EMAIL PROTECTED] -- ICQ 2928664
"The FBI can KISS MY ASS!"
-- Tyler Riti.
---------------------------------------------------------------------------
Send administrative requests to [EMAIL PROTECTED]
