A rootkit entered my PC, what can I do?

[Cookie503]

Hi everyone!

I think I did a bubu. I wanted to install something that needed root permission...so I googled it and found out how to install it through root. Only after that I realised what I had done:

Now when I try to run updates I get this error: Executing usr/sbin/synaptic '--hide-main-window' '--non-interactive' '--parent-window-id' '37748739' '--update-at-startup' as root user has failed.

When I try unlocking the "user and groups" I get this error: "An unexpected error has ocured"

Plus, I can't do much...it seems I don't have anykind of permission now...I think this is all because I did that sudo thing.

What should I do next? Is there a way fixing it without having to reinstall?

Thank you guys!

[shearn89]

can you clarify what you did to install it - maybe a link to the page? Did you just do "sudo <command>", or something else?

[PmDematagoda]

What exactly did you install using root? If it was a rootkit you were installing then you may not have much hope of a good recovery.

[Cookie503]

It must have been some package I didn't manage to install using the synaptic package administrator. I don't remember though. The latest application I've instaled is Virtual Box, only after I installed it and had to do the "user and groups" modification I noticed something is wrong.

[PmDematagoda]

It must have been some package I didn't manage to install using the synaptic package administrator. I don't remember though. The latest application I've instaled is Virtual Box, only after I installed it and had to do the "user and groups" modification I noticed something is wrong.

Well, can you at least remember the link/web site you got the package from?

[shearn89]

What user and groups modification? Do you have a link to the page?

Edit: I keep saying exactly what PmDematagoda is saying...

[Cookie503]

Well, can you at least remember the link/web site you got the package from?

No, unfortunately I don't. I instaled many packages that night.

What user and groups modification?

After installing virtual box I have to assign my user the vbox group...


Is there a log I can check or anything I can do? I searched the forum before making this thread and I found someone else who had the problem, he fixed it by using the live cd and editing "hosts" file in /etc/ - but I can't do that from the live cd, acces denied or something like that, don't have permission.

Here's what my "hosts" file says

127.0.0.1 localhost
127.0.1.1 mihai-desktop

'mihai' is my username.

Any ideas guys? Thank you!

[shearn89]

Do you know how you added your user to the vbox group?

[Cookie503]

I didn't shearn89, I didn't manage to do that, because I couldn't unlock the "user and groups" menu. When I hit 'unlock' that 'An unexpected error has ocured' pops out.

I was going to assign my user to the virtual box group but that error popped out, and I realised something is wrong, after that I noticed some menus are missing, I tried adding them back, but when I tick their name (to add them) they just don't show up...

[PmDematagoda]

Did you try adding yourself to the vbox group manually using:-

sudo usermod -a -G vbox username