Conspiracy theory follows.
Are you permanently connected to the Internet?
Has someone accessed your box and dropped on a trojan and then caused your
box to reboot?
I suggest you check it out VERY carefully.
Howard.
______________________________________________________
LANNet Computing Associates <http://www.lannet.com.au>
On Sat, 18 Mar 2000, Nick Croft wrote:
>
> I was away from 8 am till 8pm today, (Fri March 17).
> When I got home, the computer had mysteriously rebooted itself.
>
> My son suggests a St. Patrick's Day Linux Virus.
>
> Here's `last':-
>
> nicko pts/2 Fri Mar 17 19:33 still logged in
> nicko pts/1 Fri Mar 17 19:33 still logged in
> nicko pts/0 Fri Mar 17 19:33 still logged in
> nicko tty1 Fri Mar 17 19:33 still logged in
> reboot system boot Fri Mar 17 14:00
> nicko pts/4 Thu Mar 16 07:41 - crash (1+06:19)
> root pts/0 Thu Mar 16 07:40 - 07:41 (00:00)
> nicko pts/0 Thu Mar 16 07:39 - 07:40 (00:00)
> root pts/4 Thu Mar 16 07:39 - 07:39 (00:00)
>
> That mysterious `reboot' at 14:00 worries me. No-one was home.
> Could the cat do it ? Was there a power failure today. Why 14:00
> precisely?
> There's nothing different about the box except I started using xglobe
> yesterday.
> The `crash' at 7:41 yesterday did not occur, although I did `exit'
> WindowMaker at some stage, (always a bit traumatic) while getting the hang
> of xglobe.
>
> Any other St. Pat's Viruxen ?
>
> Slainte, Dia 's Maire agaibh,
> Tog e go bog !
>
> Nick
>
>
> PS Here's /var/log/messages
> Mar 17 12:56:45 localhost named[335]: XSTATS 953258205 952761400 RR=1
> RNXD=0 RFwdR=0 RDupR=0 RFail=0 RFErr=0 RErr=0 RAXFR=0 RLame=0 ROpts=0
> SSysQ=1 SAns=0 SFwdQ=0 SDupQ=164 SErr=1 RQ=0 RIQ=0 RFwdQ=0 RDupQ=0 RTCP=0
> SFwdR=0 SFail=0 SFErr=0 SNaAns=0 SNXD=0
> Mar 17 13:01:01 localhost PAM_pwdb[13776]: (su) session opened for user
> news by (uid=0)
> Mar 17 13:01:01 localhost PAM_pwdb[13776]: (su) session closed for user
> news
> Mar 17 14:01:03 localhost syslogd 1.3-3: restart.
> Mar 17 14:01:03 localhost syslog: syslogd startup succeeded
> Mar 17 14:01:03 localhost syslog: klogd startup succeeded
> Mar 17 14:01:03 localhost kernel: klogd 1.3-3, log source = /proc/kmsg
> started.
> Mar 17 14:01:03 localhost kernel: Inspecting /boot/System.map-2.2.5-15
> Mar 17 14:01:04 localhost kernel: Loaded 6721 symbols from
> /boot/System.map-2.2.5-15.
> Mar 17 14:01:04 localhost kernel: Symbols match kernel version 2.2.5.
> Mar 17 14:01:04 localhost kernel: Loaded 101 symbols from 6 modules.
> Mar 17 14:01:04 localhost kernel: Linux version 2.2.5-15
> ([EMAIL PROTECTED]) (gcc version egcs-2.91.66 19990314/Linux
> (egcs-1.1.2 release)) #1 Mon Apr 19 22:21:09 EDT 1999
>
> etc
> etc
>
>
> --
> SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
> To unsubscribe send email to [EMAIL PROTECTED] with
> unsubscribe in the text
>
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
