Can't tell if I have been hacked :(
A.G.
prothonotar at tarnation.dyndns.org
Fri Mar 31 13:32:05 UTC 2006
On Mon, 2006-03-20 at 10:05 -0500, Lovell Mcilwain wrote:
> Hey guys,
>
> Can you give me some input on whether I have been hacked or not?
>
> I logged into my machine via ssh and found that I couldn't run any
> commands and got a input/output error. I couldn't run the who command
> to see if anyone else was logged into my machine and I couldn't check my
> firestarter log to see if I have been breached.
>
> I was able to run an ls -al and found that a lot of my permissions had
> ???? as the owner. My gnome interface is pretty much disappeared and
> all I see is the background. I can't shut down this machine because the
> halt and shutdown commands are not recognized (I get the same
> input/output error)
Sounds more like a hard drive/filesystem error. If you can run dmesg,
try that and see if you notice any errors in it.
Then I suggest you try booting from a rescue disk to view your logs
(especially /var/log/messages), fsck, grab important files, etc.
More information about the fedora-list
mailing list