[Subject Prev][Subject Next][Thread Prev][Thread Next][Subject Index][Thread Index]
Re: Re: [LIH] Virus in linux????????
sorry buddy tried all you suggested, no success.
the shell for root is already /bin/bash
and the default behaviour for ctrl-alt-del is the same as is in my personal
machine shutdown -t3 -r now
what might be wrong?
i'm not aware if you noticed this
> 1. IF WE TRY TO LOGIN AS ROOT THE FOLLOWING HAPPEN
> IF THE PASSWORD IS THE SAME AS THE ADMIN HAD SET IT - THE SCREEN WOULD
> SIMPLY CLEAR, WITHOUT GIVING ANY MESSAGE.
> IF WE ENTER A WRONG PASSWORD, THE EXPECTED login incorrect APPEARS.
> apparently the "virus" scans for the actual password.
So how do i login as admin, lilo: linux root=/dev/hda2 rw single?
----- Original Message -----
From: "shubhendu" <97co266@xxxxxxxxxxxxxx>
Sent: Saturday, January 13, 2001 2:20 PM
Subject: [LIP] Re: [LIH] Virus in linux????????
> > Hello all,
> > something really strange happened today, strong enough to shake me, so
> > mind the crooked language below.
> > we have linux 6.2 installed on the computers in our lab. the admin
> > onto a computer 8:30 in the morning and left the login in the root user
> > after sometime we discovered that the system won't just let us perform
> > admin tasks. we could still login with other a/c names and work on the
> > computer as normally as ever. we even started the X. only the admin
> > functions wouldn't work.
> it seems that y'r login shell for the root account is changed in
> /etc/passwd check it whether it is /bin/bash or not
> try following
> reboot the system : by doing h/w reset
> <> on lilo: prompt write
> LILO: linux root=/dev/hdaX rw single
> <> replace X with root partion no ..
> <>edit y'r /etc/passwd file
> <>come back to prompt
> # init 3
> > 2. IF WE TRY TO RESTART THE COMPUTER BY DOING THE FOLLOWING
> > A) PRESS CTRL-ALT-DELETE
> > B) reboot
> > C) SHUTDOWN -H 0
> > THE FOLLOWING MESSAGE APPEARS
> > "You don't exist anyway. Go away".
> this might have happened due to change in /etc/inittab where default
> action for the ctr-alt-del is defined ,the command to be executed
> i hope this will help ,
> pls correct me if a'm wrong somewhere
> The mailing list archives are available at