On 9/25/10 7:52 AM, Gene Heskett wrote:
> On Saturday, September 25, 2010 10:33:05 am Mike Dwiggins did opine:
>
>>On 9/25/2010 6:02 AM, g wrote:
>>> On 09/25/2010 06:50 AM, Mike Dwiggins wrote:
This all started with a power out crash thanks to my Electrical
Company.
>>> yo
On Saturday, September 25, 2010 10:33:05 am Mike Dwiggins did opine:
> On 9/25/2010 6:02 AM, g wrote:
> > On 09/25/2010 06:50 AM, Mike Dwiggins wrote:
> >>This all started with a power out crash thanks to my Electrical
> >>
> >> Company.
> >
> > you trust you electrical supplier and it the
On 9/26/10 8:17 AM, JD wrote:
>
> On 09/26/2010 05:49 AM, James McKenzie wrote:
>> On 9/25/10 11:05 PM, Ed Greshko wrote:
>>> On 09/26/2010 01:52 PM, JD wrote:
On 09/25/2010 10:42 PM, Ed Greshko wrote:
> On 09/26/2010 12:54 PM, JD wrote:
>> Well,if my machine was rooted,
On 09/26/2010 05:49 AM, James McKenzie wrote:
>On 9/25/10 11:05 PM, Ed Greshko wrote:
>>On 09/26/2010 01:52 PM, JD wrote:
>>> On 09/25/2010 10:42 PM, Ed Greshko wrote:
On 09/26/2010 12:54 PM, JD wrote:
> Well,if my machine was rooted, and I have a firewall that
> drops AL
JB gmail.com> writes:
> ...
> > Ran chkrootkit and it hit on netstat as Infected (imagine that). It
> > also reported a possible LKM Trojan intrusion. I then ran rkhunter and
> > it threw warnings on the following files:
> > /bin/netstat
> > /bin/ps
> > /usr/bin/top
> > /usr/bin/lsof
> >
>
On 9/25/10 11:05 PM, Ed Greshko wrote:
> On 09/26/2010 01:52 PM, JD wrote:
>> On 09/25/2010 10:42 PM, Ed Greshko wrote:
>>>On 09/26/2010 12:54 PM, JD wrote:
Well,if my machine was rooted, and I have a firewall that
drops ALL incoming requests, then how was it rooted if not
th
Mike Dwiggins azdwiggins.com> writes:
>
> JB,
>
> I figured you or someone else might like to know this. I killed the dhc
> process and cleaned up the .conf files did a restart on Network Manage
> and everything worked!
>
> Ran chkrootkit and it hit on netstat as Infected (imagine that).
On 09/26/2010 01:52 PM, JD wrote:
>
> On 09/25/2010 10:42 PM, Ed Greshko wrote:
>> On 09/26/2010 12:54 PM, JD wrote:
>>> Well,if my machine was rooted, and I have a firewall that
>>> drops ALL incoming requests, then how was it rooted if not
>>> through some package or through the kernel itself
On 09/25/2010 10:42 PM, Ed Greshko wrote:
> On 09/26/2010 12:54 PM, JD wrote:
>> Well,if my machine was rooted, and I have a firewall that
>> drops ALL incoming requests, then how was it rooted if not
>> through some package or through the kernel itself?
> I would suggest folks take a step bac
On 09/26/2010 12:54 PM, JD wrote:
> Well,if my machine was rooted, and I have a firewall that
> drops ALL incoming requests, then how was it rooted if not
> through some package or through the kernel itself?
I would suggest folks take a step back and do some research on "lkm
false positive" befo
On 09/25/2010 08:38 PM, James McKenzie wrote:
>On 9/25/10 8:34 PM, Mike Dwiggins wrote:
>> On 9/25/2010 8:28 PM, JD wrote:
>>> On 09/25/2010 07:14 PM, Mike Dwiggins wrote:
JB,
I figured you or someone else might like to know this. I killed the dhc
process and cl
On 9/25/10 8:34 PM, Mike Dwiggins wrote:
>On 9/25/2010 8:28 PM, JD wrote:
>> On 09/25/2010 07:14 PM, Mike Dwiggins wrote:
>>> JB,
>>>
>>> I figured you or someone else might like to know this. I killed the dhc
>>> process and cleaned up the .conf files did a restart on Network Manage
>>
On 9/25/2010 8:28 PM, JD wrote:
>
> On 09/25/2010 07:14 PM, Mike Dwiggins wrote:
>> JB,
>>
>> I figured you or someone else might like to know this. I killed the dhc
>> process and cleaned up the .conf files did a restart on Network Manage
>> and everything worked!
>>
>> Ran chkrootkit and i
On 09/25/2010 07:14 PM, Mike Dwiggins wrote:
>JB,
>
> I figured you or someone else might like to know this. I killed the dhc
> process and cleaned up the .conf files did a restart on Network Manage
> and everything worked!
>
> Ran chkrootkit and it hit on netstat as Infected (imagine that).
JB,
I figured you or someone else might like to know this. I killed the dhc
process and cleaned up the .conf files did a restart on Network Manage
and everything worked!
Ran chkrootkit and it hit on netstat as Infected (imagine that). It
also reported a possible LKM Trojan intrusion. I th
JB gmail.com> writes:
> ...
A follow-up.
Immediately after killing dhclient do not forget to clean up the system files
(remove NetworkManager-related data):
# cat /etc/hosts
# cat /etc/resolv.conf
JB
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription o
Thanks for the info JB. I have that printed out and will try the two
programs before I do anything else.
The Fedora machine is my Hobby machine and does not affect my wife's
business in any way so I can afford to take some time to research.
However like you the root password getting hosed le
Mike Dwiggins azdwiggins.com> writes:
>
> On 9/25/2010 6:38 AM, JB wrote:
> > some unrelated software package malfunctions ...
> > You have to consider that you have been hacked, I guess. Normally you
> > should
> > take your machine offline until you understand what is the damage.
> >
> > I a
On 9/25/2010 10:18 AM, Genes MailLists wrote:
> On 09/25/2010 12:55 PM, Mike Dwiggins wrote:
>
>> Especially after I got this:
>>
>> # rpm -V| --verify *
>> bash: --verify: command not found
>> rpm: no arguments given for verify
>>
>>
>> Something is not right!
>>
>That command is not correct
On 09/25/2010 12:55 PM, Mike Dwiggins wrote:
> Especially after I got this:
>
> # rpm -V| --verify *
> bash: --verify: command not found
> rpm: no arguments given for verify
>
>
> Something is not right!
>
That command is not correct ... its piping output of 'rpm -V' into a
command '--verif
On 9/25/2010 6:38 AM, JB wrote:
> some unrelated software package malfunctions ...
> You have to consider that you have been hacked, I guess. Normally you should
> take your machine offline until you understand what is the damage.
>
> I am only online long enough to test the ping
> Well, where d
On 9/25/2010 8:06 AM, g wrote:
> On 09/25/2010 02:21 PM, Mike Dwiggins wrote:
>
>
>> Well g, if I could afford a UPS that had a longer run time than two
>> hours I would have it!.
> an ups should not be considered as a means to keep a system up and
> running until power is restored. that is not
On 09/25/2010 02:21 PM, Mike Dwiggins wrote:
> Well g, if I could afford a UPS that had a longer run time than two
> hours I would have it!.
an ups should not be considered as a means to keep a system up and
running until power is restored. that is not a battery system, unless
you have an auto
On 9/25/2010 6:02 AM, g wrote:
> On 09/25/2010 06:50 AM, Mike Dwiggins wrote:
>>This all started with a power out crash thanks to my Electrical
>> Company.
> you trust you electrical supplier and it their fault that you
> do not use an ups?
>
> do you have a full backup that you can use to wi
Mike Dwiggins azdwiggins.com> writes:
>
> This all started with a power out crash thanks to my Electrical
> Company. After power came back up I could not access the server via the
> network.
>
> When I first got to the console I could not log in as root nor could if
> do an "su" as my use
On 09/25/2010 06:50 AM, Mike Dwiggins wrote:
> This all started with a power out crash thanks to my Electrical
> Company.
you trust you electrical supplier and it their fault that you
do not use an ups?
do you have a full backup that you can use to wipe drive, run a
full drive test, then resto
This all started with a power out crash thanks to my Electrical
Company. After power came back up I could not access the server via the
network.
When I first got to the console I could not log in as root nor could if
do an "su" as my user log in. Using Webmin via localhost I found the
pass
27 matches
Mail list logo
