Re: Can't remove file as root

From: GRuB (brightspamblack@macspam.spam__com)
Date: 02/23/02

  • Next message: Bob Lawson: "Re: Can't remove file as root" 

    From: GRuB <brightspamblack@macspam.spam__com>
Date: Sat, 23 Feb 2002 22:24:21 +0900

    Just wanted to say thanks for the link - my friend got done a month or
    so ago - wasn't pretty. Michael - good luck, sorry I can't help.

    GRuB

    Michael Heiming wrote:
    > Teddy (<3C778B2D.E6307E50@bla.bla>):
    >
    >
    >>I have the problem, that I can't remove a file as root anymore,
    >>and I don't know why. The file was replaced by a hacker.
    >>
    >>root@host:/bin # ls -l ps
    >>-rwxr-xr-x 1 root root 13583 Feb 9 01:04 ps
    >>root@host:/bin # rm ps
    >>rm: remove `ps', overriding mode 0755? y
    >>rm: ps: Operation not permitted
    >>root@host:/bin # chmod 0700 ps
    >>chmod: ps: Operation not permitted
    >>
    >
    > Try:
    > lsattr /bin/ps
    >
    > However, there is no way for you to clean up your system, you need
    > to install from scratch and apply the latest patches for your
    > distro, before you bring the box online again. Unplug it NOW from
    > the internet!
    >
    > 5.6) I've been compromised, what should I do?
    > http://www.linuxsecurity.com/docs/colsfaq.html#5.6
    >
    > Michael Heiming
    > --
    > Remove the +SIGNS case mail bounces.
    >

    Relevant Pages

    • Re: What would you use? VNC or Exceed?
      ... Michael Heiming wrote: ... > guess he meant he is using some M$ box to connect to some Linux box. ... hey Michael ... ...
      (comp.os.linux.setup)
    • Re: Is this an easy fix or complicated one?
      ... Ivee and Michael for sticking with me to figure this out. ... > In memory of our dear friend, ... >>> power outage, it might damage your system beyond repair. ... >>> connection active, perhaps sending out information beyond what is normal, ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: Baby Joels Bday Bash
      ... That's evil Michael!! ... Friend of ours gave our twins a 'Music Set' for ... their second birthday. ...
      (rec.food.cooking)
    • Re: Windows Firewall will not disable!
      ... Troubleshooting Windows XP ... >> In memory of our dear friend, MVP Alex Nichol. ... >> Michael Solomon MS-MVP ...
      (microsoft.public.windowsxp.general)
    • Re: XP shutdown since installing SP2
      ... Michael, can you download and snd to me so I can install. ... > environment, hence, various drivers and possibly even some of your software ... > In memory of our dear friend, ...
      (microsoft.public.windowsxp.accessibility)