hosted by liquidweb


Go Back   Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Redhat question
Reply

Forum Jump

Redhat question

Reply Post New Thread In Hosting Security and Technology Subscription
 
Send news tip View All Posts Thread Tools Search this Thread Display Modes
  #1  
Old 03-14-2004, 01:36 PM
BootsSiR BootsSiR is offline
WHT Addict
 
Join Date: Jan 2004
Posts: 105

Redhat question


/bin/ls: unrecognized prefix: do
/bin/ls: unparsable value for LS_COLORS environment variable

I get this everytime I do an ls

The directory still lists, but that preceeds it.

Any idea what causes this? It just started the other day

__________________
Reality Check!



Sponsored Links
  #2  
Old 03-14-2004, 01:45 PM
Steven Steven is offline
Problem Solver
 
Join Date: Mar 2003
Location: California USA
Posts: 13,081
You are infected with the t0rn rootkit. I suggest hiring someone good with security that knows how to remove it or get a os reinstall. The os reinstall would be better

__________________
Steven Ciaburri | Proactive Linux Server Management - Rack911.com
System Administration Extraordinaire | Follow us on twitter:@Rack911Labs
Managed Servers (AS62710), Server Management, and Security Auditing.
www.HostingSecList.com - Security notices for the hosting community.

  #3  
Old 03-14-2004, 01:59 PM
BootsSiR BootsSiR is offline
WHT Addict
 
Join Date: Jan 2004
Posts: 105
ewwwww

really?

Anywhere I can find info on this?

Sponsored Links
  #4  
Old 03-14-2004, 02:04 PM
Steven Steven is offline
Problem Solver
 
Join Date: Mar 2003
Location: California USA
Posts: 13,081
http://www.webhostingtalk.com/showth...hreadid=247248

http://www.webhostingtalk.com/showth...hreadid=247298

but be warned if you dont know what you are doing you might not get it all

__________________
Steven Ciaburri | Proactive Linux Server Management - Rack911.com
System Administration Extraordinaire | Follow us on twitter:@Rack911Labs
Managed Servers (AS62710), Server Management, and Security Auditing.
www.HostingSecList.com - Security notices for the hosting community.

  #5  
Old 03-14-2004, 02:35 PM
BootsSiR BootsSiR is offline
WHT Addict
 
Join Date: Jan 2004
Posts: 105
thanks for the info

  #6  
Old 03-14-2004, 03:35 PM
BootsSiR BootsSiR is offline
WHT Addict
 
Join Date: Jan 2004
Posts: 105
Checking `login'... INFECTED
Checking `pstree'... INFECTED


chkrootkit seems to come up clean except for these two files

I've followed the instructions in the other posts and removed all the crap. Any suggestions?

  #7  
Old 03-14-2004, 03:59 PM
BootsSiR BootsSiR is offline
WHT Addict
 
Join Date: Jan 2004
Posts: 105
as well, my syslog seems to be giving me grief

syslogd dead but pid file exists
klogd (pid 7839 6202 5986 3845 3145) is running...

  #8  
Old 03-14-2004, 04:18 PM
BootsSiR BootsSiR is offline
WHT Addict
 
Join Date: Jan 2004
Posts: 105
I can have my OS reloaded... what can I do to prevent this from happening again??

  #9  
Old 03-14-2004, 05:03 PM
BootsSiR BootsSiR is offline
WHT Addict
 
Join Date: Jan 2004
Posts: 105
one last question while I'm at it

Is it safe to say that users home directories are safe to backup and restore when my os reload is complete?

I don't want to carry over any of this crap!

Reply

Related posts from TheWhir.com
Title Type Date Posted
Red Hat Announces Sales Records and Acquisition of French Cloud Company eNovance Web Hosting News 2014-06-19 13:14:21
GnuTLS Hello Vulnerability Poses Potential Risks to Secure Servers and Applications Web Hosting News 2014-06-04 12:08:31
Beta Release of Red Hat Enterprise Linux 7 Launched Web Hosting News 2013-12-12 13:01:56
Red Hat Releases Version 1.1 of PaaS Offering OpenShift Enterprise Web Hosting News 2013-02-14 16:06:39
Red Hat Previews Commercial Version of OpenStack Web Hosting News 2012-08-13 18:28:08


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Postbit Selector

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Forum Jump
Login:
Log in with your username and password
Username:
Password:



Forgot Password?
Advertisement:
Web Hosting News:



 

X

Welcome to WebHostingTalk.com

Create your username to jump into the discussion!

WebHostingTalk.com is the largest, most influentual web hosting community on the Internet. Join us by filling in the form below.


(4 digit year)

Already a member?