Latest LQ Deal: Latest LQ Deals
Go Back > Forums > Linux Forums > Linux - Newbie
User Name
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!


  Search this Thread
Old 07-22-2003, 08:29 PM   #1
LQ Newbie
Registered: Jul 2003
Location: Vancouver, BC - Canada
Distribution: Red Hat 9
Posts: 12

Rep: Reputation: 0
Very basic question


I have a Red Hat linux 7.2 installation which got hacked and it looks like the original init has been replaced. The date stamp on init is the day the httpd server stopped working and the system would no longer boot. Also, if I start up the system using "Linux Rescue" from the 1st CD-ROM, and then start init from the command line part of the message displayed is "Starting backdoor daemon" which leads me to believe that the system has been hacked.

I have tried just about everything and am unable to start the system. So I plan to format the hard drive and reinstall the system. However, I am trying to save all my data.

While the system was working, the hard drive (SCSI) had the following 3 partitions:

1. sda1: /boot
2. sda2: /
3. sda3: SWAP

The SWAP partition was 500 MB.

Using Disk Druid on the 1st CD-ROM I have now reformated the sda3 partition and mounted it as /backup (ext3 file system) and I no longer have a SWAP partition. My intention in doing this is to transfer my data to the /backup partition, then format sda1, delete sda2 and in its place, create 2 new partitions one of which will be mounted as root "/" and the other as a SWAP partition. After reinstalling the system, I hope to then transfer my data from the /backup partition to the "/" partition.

Using "Linux Rescue" I get to the command prompt which is:

At this point I did: chroot /mnt/sysimage and the command prompt is now: / #

If I do ls -l at this point I see the /backup directory which was not there when I had a SWAP partition.

My question is: Is this "backup" directory actually on sda3 or is it on sda2 as it shows up in the directory listing of "/" which is on sda2. Before I format sda2, I jsut want to be sure that I don't desctroy the "backup" directory.

Will appreciate help from any of you.



Last edited by rajanr; 07-22-2003 at 09:44 PM.
Old 07-22-2003, 09:06 PM   #2
Registered: Jul 2003
Location: Fort Worth, Texas
Distribution: Mepis Linux 2004
Posts: 547

Rep: Reputation: 30
To me that is not a basic question. Sorry I cannot help. Just posting so it'll email me when a responce is done so I can keep tabs on it
Old 07-23-2003, 03:13 AM   #3
LQ Newbie
Registered: Jul 2003
Location: Vancouver, BC - Canada
Distribution: Red Hat 9
Posts: 12

Original Poster
Rep: Reputation: 0
See: for an explanation


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Basic Question insyte Linux - Wireless Networking 4 09-16-2004 11:57 AM
Basic C++ question ooagentbender Programming 10 12-10-2003 09:34 PM
*very* basic c question usernamed Programming 9 08-21-2003 08:29 AM
A really basic question pilotgi Linux - Newbie 10 10-14-2002 04:57 PM
basic question kurgan70 Linux - General 2 12-06-2001 03:42 PM > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 01:06 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration