[linux-help] Re: linux passwd file

["Dale W Hodge" <dwh@xxxxxxxxxxxxxxxx>]

> -----Original Message-----
> From: linux-help-bounce@xxxxxxxxx [mailto:linux-help-bounce@xxxxxxxxx]On
> Behalf Of j m wagle
>
> Could someone help me with the following 5 entries in my passwd file:
>
> nashu:VC5POxYUtMvIo:505:505::/home/nashu:/bin/bash
>
> cap:bDHttamElaAsQ:506:506::/home/cap:/bin/bash
>
> supa:.FABZfwxGuyjQ:507:507::/home/supa:/bin/bash
>
> sd:SFs4TXvjpxNBU:0:0:Shutdown Server:/home/sd:/bin/bash
>
> cgi:XfsNgjodvDX0g:0:0::/home/cgi:/bin/bash
>
>
>
> I do not know how these entries got here.  I did have a strange thing
> happen with my 'root' password (it seems to me it changed -- I did not
> 'forget' the password).
>
Your system may have been hacked. Two people on this list have already had it
happen. Missing root passwords and strange or missing entries in the password
file are often signs of being hacked. You might want to follow these two
threads:
http://www.complete.org/mailinglists/archives/discussion-200105/msg00027.html
http://www.complete.org/mailinglists/archives/linux-help-200105/msg00005.html

--dwh

---
Dale W Hodge - dwh@xxxxxxxxxxxxxxxx
Secretary & Website Maintainer - info@xxxxxxxxx
Air Capital Linux User's Group  (ACLUG)
---


-- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi