LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Debian
User Name
Password
Debian This forum is for the discussion of Debian Linux.

Notices

Reply
 
Search this Thread
Old 09-11-2005, 11:20 AM   #1
bladehaze
LQ Newbie
 
Registered: Sep 2005
Posts: 12

Rep: Reputation: 0
seems like I delete my /etc folder.


Ok, here is seems to be the problem. I was using IglooFTP PRO ftp software to upload some files to a server. Then suddenly, it freeze. I don't know what happened,
and so I reboot the pc. Afte it checked everthing, and I am told that it
cannot find the inittab file. and let me specify run level. I entered 2, and
then it said there is nothing left to do in level 2, this is fine, but it
doesn't give me a login screen or command prompt sign. Nothing I can do about
it, I reboot the computer but reboot with knoppix. so I browser into my /
directory. I found /etc is changed into a file. I use " file -ib etc"(which is a
file now), it says x-not-regular-file. and I use " ls -l etc", and I find it is,
instead of drwxr-xr-x it is "?---------". This is where I stuck. Anyone met
this before and any suggestions about how to change that etc file back to a
folder? Thank you very much.

Last edited by bladehaze; 09-11-2005 at 11:47 AM.
 
Old 09-11-2005, 11:40 AM   #2
SlackerLX
Senior Member
 
Registered: Dec 2004
Location: Herzliyya, Israel
Distribution: SuSE 10.1; Testing Distros
Posts: 1,834

Rep: Reputation: 47
It also SEEMS to me that "distillator" is still at large. From time to time it IS recommended to check the box from rootkits.

Last edited by SlackerLX; 09-12-2005 at 12:58 PM.
 
Old 09-11-2005, 11:54 AM   #3
bladehaze
LQ Newbie
 
Registered: Sep 2005
Posts: 12

Original Poster
Rep: Reputation: 0
Quote:
Originally posted by SlackerLX
It also SEEMS to me that "distillator" is still at large. From time to time it IS recommended to check the box with rootkit.
Thanks for the reply, but I am not sure what it means. Is rootkit a software to check the system, or you were suggesting that my computer was compromised and need to check if there are "rootkit" in my linux box?

Last edited by bladehaze; 09-11-2005 at 11:55 AM.
 
Old 09-11-2005, 11:58 AM   #4
SlackerLX
Senior Member
 
Registered: Dec 2004
Location: Herzliyya, Israel
Distribution: SuSE 10.1; Testing Distros
Posts: 1,834

Rep: Reputation: 47
Yes, check system against viruses. On description you gave it looks as work of "distillator" virus written by some canadian guy, don't remember his name for sure but I think it's buskila
 
Old 09-11-2005, 12:03 PM   #5
bladehaze
LQ Newbie
 
Registered: Sep 2005
Posts: 12

Original Poster
Rep: Reputation: 0
Great, I thought I was in a virus free region under linux. so there is no fairytale world. Could you suggest a way to clean it?
 
Old 09-11-2005, 12:09 PM   #6
SlackerLX
Senior Member
 
Registered: Dec 2004
Location: Herzliyya, Israel
Distribution: SuSE 10.1; Testing Distros
Posts: 1,834

Rep: Reputation: 47
Please, You must understand that in computer world everything is possible and viruses for Linux exist as well.
On what to do now is just too little too late. You have never mentioned distro you've been using but reinstall is in order I wager.
 
Old 09-11-2005, 12:16 PM   #7
bladehaze
LQ Newbie
 
Registered: Sep 2005
Posts: 12

Original Poster
Rep: Reputation: 0
I am using a debian distro. just for future reference, where can I find information about how I am infected?
 
Old 09-11-2005, 12:22 PM   #8
SlackerLX
Senior Member
 
Registered: Dec 2004
Location: Herzliyya, Israel
Distribution: SuSE 10.1; Testing Distros
Posts: 1,834

Rep: Reputation: 47
http://www.linuxquestions.org/questi...=rootkit+virus

http://www.linuxquestions.org/questi...=rootkit+virus
 
Old 09-11-2005, 12:25 PM   #9
bladehaze
LQ Newbie
 
Registered: Sep 2005
Posts: 12

Original Poster
Rep: Reputation: 0
Thanks a lot!
 
Old 09-12-2005, 12:47 PM   #10
ssfrstlstnm
Member
 
Registered: Dec 2004
Location: IN, USA
Distribution: debian etch
Posts: 402

Rep: Reputation: 30
I would recommend the book Hacking Linux Exposed to help avoid this type of problem. It contains a wealth of information about hardening linux systems to make it much more difficult for the bad things to get in.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How do I delete a folder and everything in it? wuya Linux - Newbie 3 04-22-2005 03:03 PM
Unable to delete folder arctuniol Red Hat 2 10-11-2004 03:07 PM
delete source folder? machiner Linux - Software 2 07-27-2004 04:37 PM
I just delete the /lib folder :( Boogieman Linux - Software 8 07-13-2004 06:06 PM
How to delete the whole folder without being prompted anything conkhikho Linux - Newbie 1 10-27-2003 02:57 AM


All times are GMT -5. The time now is 04:41 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration