Re: Virus in linux????????

[Santosh Singh <sanhackin@xxxxxxxxx>]

> On Sat, Jan 13, 2001 at 01:23:42PM +0530, Rahul
> Jindal wrote:
>     IF THE PASSWORD IS THE SAME AS THE ADMIN HAD
> SET IT - THE SCREEN WOULD
> SIMPLY CLEAR, WITHOUT GIVING ANY MESSAGE.
> 
> u're shell is fscked, or someone put /bin/nologin as
> r00t's shell. check
> up /etc/passwd.
I dont think it is a virus rather it is culture of
some chaps out there.

1. Check /etc/passwd for default shell then peek into
.profile to find something unusual.

2. U can change ur root password from lilo prompt by
typing:
 lilo: linux init=/bin/bash rw
then change the password using passwd and once again u
can check to login.

3.If nothing works and "only" if u r in urgent i hope
u can go for Linux setup using upgrade option with
same kernel version which "might" restore some
critical missing files if it has been deleted by
someone.It will not distort ur previous settings.

Best of luck.
Santosh

__________________________________________________
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/