[ubuntu-za] My Ubuntu 9.10 has been hacked. Need help

[Raoul Snyman]

On Tue, 6 Jul 2010 12:52:57 +0200, Jason Plank <plank.jason at gmail.com>
wrote:
> I hope someone can help or give me some advice. I've got Ubuntu 9.10
> running
> on one of our pc's at work as a LAMP server for joomla and I've also got
> virtualbox installed running NT4 workstation for a project we're working
> on.
> My problem is that some idiot has hacked the system and I can't seem to
> block him. I've tried turning of Remote Desktop, but he still get's in
and
> changes settings. I've also disabled a whole bunch of startup daemons.
> We're
> also behind a DLINK DFL-210 firewall and I've set it to drop incoming
RDP
> and telnet connections, but he still seems to be getting in. Can anyone
> give
> any ideas as to what I can do, other than format and redo the system?

How do you know you've been "hacked"? What has been "hacked", Ubuntu or
the NT4 workstation virtual machine? Please provide a little more
information about why you think you've been hacked, it helps us to
pin-point the problem and figure out how to fix it.

-- 
Raoul Snyman, B.Tech IT (Software Engineering)
Saturn Laboratories
m: 082 550 3754
e: raoul.snyman at saturnlaboratories.co.za
w: www.saturnlaboratories.co.za
b: blog.saturnlaboratories.co.za