hi

not sure if you can help, our server got hacked and del all our data, i have done a restore but none of the services start.

i just get this error

Failed to start the "httpd" service.
Cannot start/stop/restart service: Starting httpd: /usr/sbin/httpd: error while loading shared libraries: libssl.so.6: cannot open shared object file: No such file or directory
[FAILED]


Failed to start the "sshd" service.
Cannot start/stop/restart service: Starting sshd: /usr/sbin/sshd: error while loading shared libraries: libcrypto.so.6: cannot open shared object file: No such file or directory
[FAILED]



can anyone help me? sending me mad.

Looks like your security related libraries have been deleted or corrupted. You need to find which packages in your distribution provide the missing packages and reinstall them. A little googling with libssl and libcrypto should help you figure this out in relation to your distro.

you may reinstall these modules, just try
#yum install libssl.so.6

If your servers security got compromised then a restore might expose the same vulnerabilities or reload leeched credentials. I suggest you assess if a restore is in order (in a lot of cases you're better off installing from scratch, also see the historical CERT Steps for Recovering from a UNIX or NT System Compromise) else you need to ensure the restored machine is functionally complete (and I guess it wasn't or else you wouldn't be missing libraries), all software is up to date, new passwords are issued for all accounts (including machines the perpetrator could have had access to), beef up on auditing and access restrictions and test no vulnerabilities are exposed.

I have tried to reinstall them both but no luck.

I can only get into repair mode as it is a VPS and using the commands there as SSH FTP don’t work so I can’t pull my files from the system.

[root@s153 repair]# yum install libcrypto..so.6
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
Traceback (most recent call last):
File "/usr/bin/yum", line 29, in ?
yummain.user_main(sys.argv[1:], exit_code=True)
File "/usr/share/yum-cli/yummain.py", line 309, in user_main
errcode = main(args)
File "/usr/share/yum-cli/yummain.py", line 178, in main
result, resultmsgs = base.doCommands()
File "/usr/share/yum-cli/cli.py", line 345, in doCommands
self._getTs(needTsRemove)
File "/usr/lib/python2.4/site-packages/yum/depsolve.py", line 101, in _getTs
self._getTsInfo(remove_only)
File "/usr/lib/python2.4/site-packages/yum/depsolve.py", line 112, in _getTsInfo
pkgSack = self.pkgSack
File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 662, in <lambda>
pkgSack = property(fget=lambda self: self._getSacks(),
File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 502, in _getSacks
self.repos.populateSack(which=repos)
File "/usr/lib/python2.4/site-packages/yum/repos.py", line 232, in populateSack
self.doSetup()
File "/usr/lib/python2.4/site-packages/yum/repos.py", line 79, in doSetup
self.ayum.plugins.run('postreposetup')
File "/usr/lib/python2.4/site-packages/yum/plugins.py", line 179, in run
func(conduitcls(self, self.base, conf, **kwargs))
File "/usr/lib/yum-plugins/fastestmirror.py", line 181, in postreposetup_hook
all_urls = FastestMirror(all_urls).get_mirrorlist()
File "/usr/lib/yum-plugins/fastestmirror.py", line 333, in get_mirrorlist
self._poll_mirrors()
File "/usr/lib/yum-plugins/fastestmirror.py", line 376, in _poll_mirrors
pollThread.start()
File "/usr/lib64/python2.4/threading.py", line 416, in start
_start_new_thread(self.__bootstrap, ())
thread.error: can't start new thread

anyone got any ideas?

The restore also fails, but i think this is due to the services unable to start?

Please reread, and preferably heed the advice given to you by unSpawn.

#yum clean all
#yum list all | grep -i -E 'libssl|libcryp'

first check whether the file is present in the repository.

As far as i think their might be some problem in the repository itself. Download appropriate
package from http://rpm.pbone.net/ and try.






--------------------------------------------------------------
If you want some thing don't wait go and get it.
http://thetechnicalstuff.com