Re: Urgent!!! My computer seems to be hacked, pls HELP!!!
- From: Grant <bugsplatter@xxxxxxxxx>
- Date: Fri, 15 Sep 2006 10:59:38 +1000
On Thu, 14 Sep 2006 23:20:22 GMT, Randy Yates <yates@xxxxxxxx> wrote:
Ayaz Ahmed Khan <ayaz@xxxxxxxxxxxxxxxx> writes:
"René Berber" typed:
Todd H. wrote:
Yup. It's the only way to get back to a known state. Wiping and
reinstalling from original media.
But that's not needed, you can find which process is using that
particular port and kill it (use lsof). Then run a rootkit
detection and/or anti-virus detection to try to find out where that
process came from (there are several to choose from). Before that I
would harden ssh access, no access except your user.
Reinstalling (and rebuilding) a system is far easier and quicker than
figuring out how deep and thorough the compromise is and cleaning the
system to some reasonable extent.
If the OP's like me, they are loathe to do this not for the basic OS
install, but for the dozens or perhaps hundreds of other
upgrades/applications/tweaks that they've performed since they first
installed their OS.
So?
tar cvzf .../backup-config.tar.gz /etc /boot/config-*
Wipe OS partition (6Ps) re-install OS, unpack backup-config to /tmp
and cherry pick custom .conf files --> take me less than an hour to
reinstall router with this technique.
Reminds me, take a backup now ;)
If i had to re-install, it would probably chew
up a week of my time to reconfigure everything back just the way it
was.
That's just plain pessimistic or bad planning. If you have separate
/home and /usr/local partitions, replacing the OS is a snap...
Grant.
--
http://bugsplatter.mine.nu/
.
- Follow-Ups:
- Re: Urgent!!! My computer seems to be hacked, pls HELP!!!
- From: Randy Yates
- Re: Urgent!!! My computer seems to be hacked, pls HELP!!!
- References:
- Urgent!!! My computer seems to be hacked, pls HELP!!!
- From: Jenny
- Re: Urgent!!! My computer seems to be hacked, pls HELP!!!
- From: Todd H.
- Re: Urgent!!! My computer seems to be hacked, pls HELP!!!
- From: René Berber
- Re: Urgent!!! My computer seems to be hacked, pls HELP!!!
- From: Ayaz Ahmed Khan
- Re: Urgent!!! My computer seems to be hacked, pls HELP!!!
- From: Randy Yates
- Urgent!!! My computer seems to be hacked, pls HELP!!!
- Prev by Date: Re: Urgent!!! My computer seems to be hacked, pls HELP!!!
- Next by Date: Re: Urgent!!! My computer seems to be hacked, pls HELP!!!
- Previous by thread: Re: Urgent!!! My computer seems to be hacked, pls HELP!!!
- Next by thread: Re: Urgent!!! My computer seems to be hacked, pls HELP!!!
- Index(es):
Relevant Pages
|