Re: [LUNI] cracked

From: Dan Yocum (yocum@linuxcare.com)
Date: Thu Mar 01 2001 - 14:01:52 CST

  • Next message: Scott Zionic: "RE: [LUNI] cracked"

    a) move everything else out of the current directory (one up the tree,
    at least); rm -rf the parent directory containing the evil little
    bastard.

    b) if that doesn't work then they probably changed the fs attributes on
    the dir: chattr -i <offending dir>, then rm -rf <offending dir>

    Make sure you replace all the trojans on the system with known good
    copies.

    Cheers,
    Dan

    sten@narnia.net wrote:
    >
    > I got borken into. Anyone know how to get rid of a directory called,
    > for instance,
    >
    > " ~~~~" or, better yet,
    > " ^] "
    > I know inodes are involved, but there's a hole in my head right after
    > that.
    >
    > Thanks!
    > -Sten
    >
    > "The policeman's riot club functions like a magic wand,
    > under whose hard caress the banal soul grows vivid and
    > the nameless recover their authenticity." -Carl Oglesby
    > -=-
    > Linux Users Of Northern Illinois: General Discussion Mailing list.
    > For unsubscription, archives, and announcements only see http://luni.org 

    -- 
Dan Yocum, Sr. Linux Consultant
Linuxcare, Inc.  630.697.8066 tel
yocum@linuxcare.com, http://www.linuxcare.com
Linuxcare. Putting open source to work.
-=-
Linux Users Of Northern Illinois: General Discussion Mailing list.
For unsubscription, archives, and announcements only see http://luni.org

    This archive was generated by hypermail 2b29 : Thu Mar 01 2001 - 14:01:58 CST

    		•