Re: cracked? "rm uses obsolete (PF_INET,SOCK_PACKET)"
-----BEGIN PGP SIGNED MESSAGE-----
On Saturday 14 June 2003 08:16, eyem wrote:
> Hello,
>
Hello.
>
> rm uses obsolete (PF_INET,SOCK_PACKET)
> ...
> eth0: Setting promiscuous mode
> ppp0: Setting promiscuous mode
> ...
>
> I found some stuff in /dev, hdx1 and hdx2 .... is that normal?
>
No, that isn't normal. It seems that you have been infected whith the rstb
virus. It infects all executable files under /bin/ directory and under the
directory from which the infected file has been launched. Seach for
rstb_cleaner, whith this tool you can clean the infected files.
> Anyway, I have no idea where to go from here.
> I dont know if it will be just a couple of things to fix up, or if I should
> toast my whole system: major major hasstle)
>
Most of 7350* fake 0days are infected with some kind of virus. Maybe a user
uploaded and executed an infected exploit.
- --
Linux registered User #142704 Clave PGP:
http://www.keyserver.net:11371/pks/lookup?search=Fuska&op=get
Fingerprint = F6B3 B665 95FA B9D0 13FD 72D5 5106 22F7 58BD 7EDE
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Vosotros me imponeis la ley del silencio | You are in a dark room with a
porque teneis miedo de que este, vuestro | compiler, emacs, an internet
mundo, no sea el mejor de los mundos | connection, and a thermos of
sino el peor, el mas sordido. - Dario Fo | coffe. Your move?
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
MessageID: QzZFtJcjInzgThn2BD7Asqto3spoiD/O
iQA/AwUBPuywJFEGIvdYvX7eEQI/4wCguUF96cQcF1JxBWW2w0MBzQnpxVgAn1N5
Voagw8y6Ip3BlT6QJpPWQT3o
=vZgy
-----END PGP SIGNATURE-----
Reply to: