Re: [Nolug] I think my linux server has been infected???

ok, I booted up with the knoppix cd ver 3.4 and it did detect and setup
network.So something must be wrong with my operating system?
Any ideas of what to do next, I can,t connect to the internet with it.I
guess I would have to put chkrootkit on a disk from my windows
computer.Install it and see what I find???? any other things I might be able
to do?

----- Original Message -----
From: "David Cox" <cdcox@cox.net>
To: <nolug@nolug.org>
Sent: Tuesday, February 15, 2005 11:21 PM
Subject: Re: [Nolug] I think my linux server has been infected???

> okay, I will try the knoppix cd and see what happens.I will get a copy of
> chkrootkit and run that.
>
> David Cox
>
>
> ----- Original Message -----
> From: "Scott Harney" <scotth@scottharney.com>
> To: <nolug@nolug.org>
> Sent: Tuesday, February 15, 2005 8:33 PM
> Subject: Re: [Nolug] I think my linux server has been infected???
>
>
> > David Cox wrote:
> > > Something strange happened over the week-end other than me coming down
> > > with the flu.I no longer have access to the internet via my network
eth0
> > > and all of a sudden my sound is not configured anymore.This all
happened
> > > about the same time.I tried another network card and nothing.I am
using
> > > my windows box with the network card that came out of the Linux
> > > server.Are there any viruses out there that possibly caused this???
> >
> > Defintely not a virus. I assume you rebooted the box after you
> > witnessed this. perhaps you need to watch the bootup. If it's obscured
> > by a graphic you should be able to disable that or use the 'dmesg |
> > less' command to view startup messages and kernel messages. Look
> > through /var/log/messages and other files in /var/log -- you'll find
> > hits there.
> >
> > I suspect your box had a hardware problem, perhaps a runaway cron job
> > process ate up RAM which killed off several processes. Or even just a
> > buggy dekstop app can do this.
> >
> > Consider booting a knoppix CD and see if all your hardware is
recognized.
> >
> > >
> > > Also my scsi drives are not showing up either.I had 2 scsi drives
which
> > > were both fat32 windows.Now they are missing in action I guess.
> > >
> > > Not sure what to do or how to fix this one?
> > >
> > > David Cox
> >
> >
> > --
> > Scott Harney<scotth@scottharney.com>
> > "Asking the wrong questions is the leading cause of wrong answers"
> > gpg key fingerprint=7125 0BD3 8EC4 08D7 321D CEE9 F024 7DA6 0BC7 94E5
> > ___________________
> > Nolug mailing list
> > nolug@nolug.org
>
> ___________________
> Nolug mailing list
> nolug@nolug.org

___________________
Nolug mailing list
nolug@nolug.org
Received on 02/16/05