Re: Virus in linux????????

["Rahul Jindal" <rahulj@xxxxxxxxxxxxxx>]

thnaks for your reply, i'll try what you said.
----- Original Message ----- 
From: "Santosh Singh" <sanhackin@xxxxxxxxx>
To: <linux-india-programmers@xxxxxxxxxxxxxxxxxxxxx>
Sent: Monday, January 15, 2001 10:21 AM
Subject: Re: [LIP] Virus in linux????????


> 
> > On Sat, Jan 13, 2001 at 01:23:42PM +0530, Rahul
> > Jindal wrote:
> >     IF THE PASSWORD IS THE SAME AS THE ADMIN HAD
> > SET IT - THE SCREEN WOULD
> > SIMPLY CLEAR, WITHOUT GIVING ANY MESSAGE.
> > 
> > u're shell is fscked, or someone put /bin/nologin as
> > r00t's shell. check
> > up /etc/passwd.
> I dont think it is a virus rather it is culture of
> some chaps out there.
> 
> 1. Check /etc/passwd for default shell then peek into
> .profile to find something unusual.
> 
> 2. U can change ur root password from lilo prompt by
> typing:
>  lilo: linux init=/bin/bash rw
> then change the password using passwd and once again u
> can check to login.
> 
> 3.If nothing works and "only" if u r in urgent i hope
> u can go for Linux setup using upgrade option with
> same kernel version which "might" restore some
> critical missing files if it has been deleted by
> someone.It will not distort ur previous settings.
> 
> Best of luck.
> Santosh
> 
> __________________________________________________
> Do You Yahoo!?
> Get email at your own domain with Yahoo! Mail. 
> http://personal.mail.yahoo.com/
> 
> ---------------------------------------------
> The mailing list archives are available at
> http://lists.linux-india.org/cgi-bin/wilma/LIP
>