Do you have a question? Post it now! No Registration Necessary. Now with pictures!
- Posted on
- weird, ls ?? need help!!!!!
March 6, 2007, 3:32 am
rate this thread
I compiled c program ( myp.c ---> myp ), when use 'ls' command, I can
see myp executable file. I shutdown my linux box, but after for some
hours, I log on my linux box again, go to the path where myp exists,
then use 'ls' command, I can not see it. use './myp', it can not be run.
Then I compiled another file myp1.c ( myp1.c ---> myp1 ), I can see and
run ./myp1. then shutdown...
after for some hours, I log on my linux box again, go to the path where
myp and myp1 exist, use 'ls' command, I can see and use mpy again (myp
appears !!! ), but can not see and find myp1, it's weird loop???, can
some one give me some advice or hints or help?
Is my michine hacked?
Log files seem OK though (but not sure, maybe log files have been hacked
I appreciate your kind help!!!
Re: weird, ls ?? need help!!!!!
You are 'shutting down' your machine properly, not just pulling the plug
I hope. This is consistent with the disk activity to write the binary
file being corrected by a journaling file system rewinding itself to a
stable state if flagged as damaged on startup.
I have only seen this type of behaviour on a different operating system,
but the same sort of trojan could exist here, I suppose. If some trojan
had got in to your system (with root privileges) and wished to conceal
its existance, it would be able to modify a few system calls to remain
invisible. If there were bugs in this code there might be other side
effects like this. One important check --- boot a live linux distribution
such as knoppix (as an example, there are quite a few) and mount the
problem file system there. If your files have re-appeared you could have
found your problem. A live distibution like this would probably also
provide a good way of checking your file system with fsck as other
posters have suggested.
- » "Definition" of DoS attack (specifically, PPPoE and DHCP)
- — Next thread in » Linux Security
- » Cloud Ace Technologies is offering Implementation Services on Cloud Computing, Cloud Serv...
- — Newest thread in » Linux Security