[ubuntu-za] My Ubuntu 9.10 has been hacked. Need help

[Wesley Werner]

Look at /var/log/auth.log to see login history for users. (details
here<https://help.ubuntu.com/community/LinuxLogFiles#Authorization
Log>)
which gives you the user account used to get in, and the IP / DNS name where
the connection originated from.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.ubuntu.com/archives/ubuntu-za/attachments/20100706/41f28ee4/attachment.htm