Re: Houston, I May Have a Problem (chkrootkit Results)

2004-08-29 Thread Scarletdown
On Sunday 29 August 2004 20:57, Bradley M Alexander wrote: > On Sun, Aug 29, 2004 at 11:04:18AM +, [EMAIL PROTECTED] wrote: > > priority is getting back up and operational. Thankfully, I have a > > couple other systems I can work with online while I do these fixes > > (DOS 6.22 and WfW 3.1

Re: Houston, I May Have a Problem (chkrootkit Results)

2004-08-29 Thread Carl Fink
On Sun, Aug 29, 2004 at 09:05:40PM -0400, Bradley M Alexander wrote: > One other thing that I would recommend, have you looked at rkhunter? Doesn't appear to be a Debian package. -- Carl Fink [EMAIL PROTECTED] Jabootu's Minister of Proofreading http://www.jabootu.com -- To UN

Re: Houston, I May Have a Problem (chkrootkit Results)

2004-08-29 Thread Bradley M Alexander
On Sat, Aug 28, 2004 at 08:56:19PM -0700, Scarletdown wrote: > Since I have been having occasional problems getting verious packages > installed or uninstalled, I decided to do a chkrootkit. The results > look rather disturbing. Is there anyway short of starting from scratch > to fix the problems

Re: Houston, I May Have a Problem (chkrootkit Results)

2004-08-29 Thread Bradley M Alexander
On Sun, Aug 29, 2004 at 11:04:18AM +, [EMAIL PROTECTED] wrote: > > I can only guess that they got in because I screwed up while doing a > few little experiments and forgot to turn the firewall back on. > > The couple other systems that are currently active on my network are > running 98

Re: Houston, I May Have a Problem (chkrootkit Results)

2004-08-29 Thread gsutton9503
On 29 Aug 04, at 1:01, Alvin Oga wrote: > > hi ya scarledown > > On Sat, 28 Aug 2004, Scarletdown wrote: > > > I'm in the process of archiving and backing up my documents, images, > > media, and other stuff I want to keep now, about 425MB worth of stuff. > > cool ... luckily ... the culprit

Re: Houston, I May Have a Problem (chkrootkit Results)

2004-08-29 Thread Loki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, 28 Aug 2004, Scarletdown wrote: > My big question that I have been pondering is, with an 80GB hard drive > and a 13.6GB hard drive, what would be the best partitioning scheme, > instead of having just one big root partition and a swap partitio

Re: Houston, I May Have a Problem (chkrootkit Results)

2004-08-29 Thread Bradley M Alexander
On Sun, Aug 29, 2004 at 01:01:14AM -0700, Alvin Oga wrote: > > hi ya scarledown > > On Sat, 28 Aug 2004, Scarletdown wrote: > > > I'm in the process of archiving and backing up my documents, images, > > media, and other stuff I want to keep now, about 425MB worth of stuff. > > cool ... lucki

Re: Houston, I May Have a Problem (chkrootkit Results)

2004-08-29 Thread Alvin Oga
hi ya scarledown On Sat, 28 Aug 2004, Scarletdown wrote: > I'm in the process of archiving and backing up my documents, images, > media, and other stuff I want to keep now, about 425MB worth of stuff. cool ... luckily ... the culprit didnt do anything worst to your machine however, you shou

Re: Houston, I May Have a Problem (chkrootkit Results)

2004-08-28 Thread Scarletdown
On Saturday 28 August 2004 21:45, Stefan O'Rear wrote: > I'd consider backing up and reinstalling. Permission Debian? root? I > mean, echo foo > /dev/cdrom should -EACCESS if it's not a burner, but > hard drives? Not good... I'm in the process of archiving and backing up my documents, images, me

Re: Houston, I May Have a Problem (chkrootkit Results)

2004-08-28 Thread Stefan O'Rear
On Sat, Aug 28, 2004 at 09:14:46PM -0700, Scarletdown wrote: > That failed. Here's the output from the apt-get attempt... > > Selecting previously deselected package fileutils. > (Reading database ... 101932 files and directories currently installed.) > Unpacking fileutils (from .../fileutils_5.2

Re: Houston, I May Have a Problem (chkrootkit Results)

2004-08-28 Thread Scarletdown
On Sat, 28 Aug 2004 21:08:00 -0700 "Stefan O'Rear" <[EMAIL PROTECTED]> wrote: > On Sat, Aug 28, 2004 at 08:56:19PM -0700, Scarletdown wrote: > > Since I have been having occasional problems getting verious packages > > installed or uninstalled, I decided to do a chkrootkit. The results > > look r

Re: Houston, I May Have a Problem (chkrootkit Results)

2004-08-28 Thread Stefan O'Rear
On Sat, Aug 28, 2004 at 08:56:19PM -0700, Scarletdown wrote: > Since I have been having occasional problems getting verious packages > installed or uninstalled, I decided to do a chkrootkit. The results > look rather disturbing. Is there anyway short of starting from scratch > to fix the problems

Re: Houston, I May Have a Problem (chkrootkit Results)

2004-08-28 Thread Bradley M Alexander
In this case, I would recommend starting from scratch. Save what personal data you need (avoiding binaries where possible) and reinstall. Afterwards, set up firewall, IDS (both host-based and network), portscan detector, log watcher etc. I wouldn't try to "recover" this installation, I would defin