LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 07-22-2003, 08:29 PM   #1
rajanr
LQ Newbie
 
Registered: Jul 2003
Location: Vancouver, BC - Canada
Distribution: Red Hat 9
Posts: 12

Rep: Reputation: 0
Very basic question


Hi,

I have a Red Hat linux 7.2 installation which got hacked and it looks like the original init has been replaced. The date stamp on init is the day the httpd server stopped working and the system would no longer boot. Also, if I start up the system using "Linux Rescue" from the 1st CD-ROM, and then start init from the command line part of the message displayed is "Starting backdoor daemon" which leads me to believe that the system has been hacked.

I have tried just about everything and am unable to start the system. So I plan to format the hard drive and reinstall the system. However, I am trying to save all my data.

While the system was working, the hard drive (SCSI) had the following 3 partitions:

1. sda1: /boot
2. sda2: /
3. sda3: SWAP

The SWAP partition was 500 MB.

Using Disk Druid on the 1st CD-ROM I have now reformated the sda3 partition and mounted it as /backup (ext3 file system) and I no longer have a SWAP partition. My intention in doing this is to transfer my data to the /backup partition, then format sda1, delete sda2 and in its place, create 2 new partitions one of which will be mounted as root "/" and the other as a SWAP partition. After reinstalling the system, I hope to then transfer my data from the /backup partition to the "/" partition.

Using "Linux Rescue" I get to the command prompt which is:
sh-2.05#

At this point I did: chroot /mnt/sysimage and the command prompt is now: / #

If I do ls -l at this point I see the /backup directory which was not there when I had a SWAP partition.

My question is: Is this "backup" directory actually on sda3 or is it on sda2 as it shows up in the directory listing of "/" which is on sda2. Before I format sda2, I jsut want to be sure that I don't desctroy the "backup" directory.

Will appreciate help from any of you.

Thanks.

Rajan

Last edited by rajanr; 07-22-2003 at 09:44 PM.
 
Old 07-22-2003, 09:06 PM   #2
jon_k
Member
 
Registered: Jul 2003
Location: Fort Worth, Texas
Distribution: Mepis Linux 2004
Posts: 547

Rep: Reputation: 30
To me that is not a basic question. Sorry I cannot help. Just posting so it'll email me when a responce is done so I can keep tabs on it
 
Old 07-23-2003, 03:13 AM   #3
rajanr
LQ Newbie
 
Registered: Jul 2003
Location: Vancouver, BC - Canada
Distribution: Red Hat 9
Posts: 12

Original Poster
Rep: Reputation: 0
See: http://www.linuxquestions.org/questi...threadid=75062 for an explanation
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Basic Question insyte Linux - Wireless Networking 4 09-16-2004 11:57 AM
Basic C++ question ooagentbender Programming 10 12-10-2003 09:34 PM
*very* basic c question usernamed Programming 9 08-21-2003 08:29 AM
A really basic question pilotgi Linux - Newbie 10 10-14-2002 04:57 PM
basic question kurgan70 Linux - General 2 12-06-2001 03:42 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 02:09 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration