Don't need to change your password before you have cleaned your box...100 to 1 the have a logger running that just stores
all logins and passes....mail, ftp, telnet, ssh, etc, etc
The best thing to do if you are on unix and know your stuff is
to close port except the absolute necesary....with ipchains or iptables.....then you have time to look......first....don't clean yet
because cleaning will erase evidence too...
If you don't know how to do it get in touch with me...I'll be glad
to help you out....ennuh I won't charge...
DynaMite