LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices


Reply
  Search this Thread
Old 01-30-2004, 08:17 AM   #1
fuelinjection
Member
 
Registered: Nov 2003
Location: County Durham, England
Distribution: Fedora
Posts: 238

Rep: Reputation: 30
Linux Virus?


My host uses a linux server, and today all my index files is the server have been replaced with the following text, yet when I try to upload the correct index file, it automatically replaces my uploaded version with the hacked file.

Is this some sort of virus?

int3rc3pt0r owned your Linux
I love this game

id
uid=0(root) gid=0(root)

uname -a
Linux stealth.angryco.ws 2.4.20-18.7 #1 Thu May 29 08:32:50 EDT 2003 i686 unknown

cat /etc/issue
This computer system is for authorized users only. Individuals using this system without authority or in excess of their authority are subject to having all their activities on this system monitored and recorded or examined by any authorized person, including law enforcement, as system personnel deem appropriate. In the course of monitoring individuals improperly using the system or in the course of system maintenance, the activities of authorized users may also be monitored and recorded. Any material so recorded may be disclosed as appropriate. Anyone using this system consents to these terms.

Do que adi-anta ter os exploits.
Do que adi-anta saber rodar os exploits
Do que adi-anta saber os comandos para um deface
Se o anta nao sabe como funfa a vul ou
O anta nao sabe nem codar um scan pra facilitar o trabalho.
Rodar exploits e facil o dificil e entender como tudo funciona.
Para nos nada e impossivel e nada esta fora do nosso alcance!

Contact - int3rc3pt0r@linuxmail.org
join #int3rc3pt0r - irc.brasnet.org

Greetz: xscream, f0ul, M15T3R, v0lks
Special Greetz: Last Attack
 
Old 01-30-2004, 08:22 AM   #2
fuelinjection
Member
 
Registered: Nov 2003
Location: County Durham, England
Distribution: Fedora
Posts: 238

Original Poster
Rep: Reputation: 30
if you search for 'int3rc3pt0r' on yahoo or google, you can see there are other website that have been hacked by this.

But I cant seem to find any information about it
 
Old 01-30-2004, 09:32 AM   #3
DMRansom
Member
 
Registered: Jun 2003
Distribution: slackware, fedora core4
Posts: 39

Rep: Reputation: 15
Seems your host was hacked by 'int3rc3pt0r' acording to
http://www.itweb.co.za/sections/inte...0210281014.asp

http://www.itweb.co.za/sections/feed...CommentID=1674

so it is not a virrus
 
Old 01-30-2004, 10:32 AM   #4
XavierP
Moderator
 
Registered: Nov 2002
Location: Kent, England
Distribution: Debian Testing
Posts: 19,192
Blog Entries: 4

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
Since your box has been hacked, your first step should be to remove it from the net. You will then want to take steps to secure it. unSpawn has provided a very good howto in the Linux-Security section: http://www.linuxquestions.org/questi...threadid=62121

I would suggest you read it thoroughly and then start to secure your system.
 
Old 01-30-2004, 12:06 PM   #5
moonloader
Member
 
Registered: Nov 2003
Location: linuxquestions.org
Distribution: Linux and BSD
Posts: 229

Rep: Reputation: 30
it is an annoying prog.let's say it is a virus!I have met with that!when it is excuted,it makes all the files int3rc3pt0r,I mean renames,but only the files what are in the same directory!and then all the files are unseful
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Boot virus or Anti-Virus? AVG Free Anti-Virus Software problems SparceMatrix Linux - Security 9 08-02-2004 02:35 PM
trend chipway virus detected boot virus rafc Linux - Security 1 05-13-2004 01:44 AM
RH 7.3 Server infected with Linux.Jac.8759 and Linux.RST.B virus osso09 Linux - Security 10 11-17-2003 11:37 PM
virus in Linux Mhran Linux - Software 12 08-18-2003 09:39 PM
virus on linux wincrk Linux - Security 3 06-26-2003 08:50 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 12:53 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration