Page 2 of 3 FirstFirst 123 LastLast
Results 11 to 20 of 26

Thread: A rootkit entered my PC, what can I do?

  1. #11
    Join Date
    Apr 2008
    Beans
    11

    Re: Sudo fails

    I tried now, here's what I got:

    mihai@mihai-desktop:~$ sudo usermod -a -G vbox username
    [sudo] password for mihai:
    mihai is not in the sudoers file. This incident will be reported.

  2. #12
    Join Date
    Aug 2007
    Location
    Kottawa, Sri Lanka
    Beans
    7,387
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: Sudo fails

    That looks terrible, I'll be moving this thread to the Security Discussions section along with a new title, hopefully the people there can help you get over this attack.

    In any case, what I know is, the best thing you can do right now is to do a clean reinstall.
    Think carefully before executing commands containing "rm", especially "sudo rm -rf ", if you require more information concerning this matter, read this.
    I am an experimenter, give me the most stable OS and I can make it unstable in a few hours.

    C == seriously fast == FTW!

  3. #13
    Join Date
    Jul 2006
    Location
    Marlborough, UK
    Beans
    519
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: Sudo fails

    Quote Originally Posted by Cookie503 View Post
    I tried now, here's what I got:

    mihai@mihai-desktop:~$ sudo usermod -a -G vbox username
    [sudo] password for mihai:
    mihai is not in the sudoers file. This incident will be reported.
    that just means sudo hasn't installed properly. There's no way to change that without logging in as root, which you can't do...

    the only thing i can think of is booting with the livecd and chrooting, which isn't simple...

    I'd go for a reinstall.
    Last edited by shearn89; April 30th, 2008 at 11:06 AM.
    Ubuntu user #11075
    Howto: AwesomeWM (OUTDATED) || My BitBucket Page || My deviantArt page
    If you find a post helpful, click the medal icon to give thanks!
    Quote Originally Posted by chucky chuckaluck View Post
    ... wallpaper is a tiling of the opera icons.

  4. #14
    Join Date
    Aug 2007
    Location
    Kottawa, Sri Lanka
    Beans
    7,387
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: A rootkit entered my PC, what can I do?

    Oh and one more thing, get off the internet and shut the thing down to prevent further damage, just get online with another PC until you fix this problem.
    Think carefully before executing commands containing "rm", especially "sudo rm -rf ", if you require more information concerning this matter, read this.
    I am an experimenter, give me the most stable OS and I can make it unstable in a few hours.

    C == seriously fast == FTW!

  5. #15
    Join Date
    Apr 2008
    Beans
    11

    Re: A rootkit entered my PC, what can I do?

    I'm dualbooting, I have a windows installed on my other hard drives...it's ok if I use it? O, will I have to reinstall my windows too?

    Thank you guys! Uhhhm, any advices so this won't happen in the future?
    I'm going to log in my windows, and delete the ubuntu partition along with the swap, and reinstall ubuntu.

  6. #16
    Join Date
    Jun 2006
    Location
    Roanoke, VA
    Beans
    152
    Distro
    Ubuntu Development Release

    Re: A rootkit entered my PC, what can I do?

    The correct advice is one you won't want to hear...

    Don't download random packages from all over the internet and install them haphazardly without knowing what you're doing! And certainly don't compromise the security of your system to get those packages installed. It shouldn't be necessary to take such a brute-force approach to getting some software set up and running.

    Wipe the partition and start from scratch.

  7. #17
    Join Date
    Jun 2007
    Location
    United Kingdom
    Beans
    283
    Distro
    Ubuntu 8.04 Hardy Heron

    Re: A rootkit entered my PC, what can I do?

    I'd agree that a clean install looks to be your only option.

    Have you tried looking at your ~/.bash_history to see what command you might have entered?

  8. #18
    Join Date
    Apr 2008
    Beans
    11

    Re: A rootkit entered my PC, what can I do?

    Bothered, I'll keep that command in mind, it's too late now, I already wiped out everything.

    Thanks again guys!

  9. #19
    Join Date
    Apr 2008
    Beans
    11

    Re: A rootkit entered my PC, what can I do?

    I tried wiping everything this way: restarting the pc, entering windows and deleting the ubuntu and swap partition...restarted the pc, entered the windows setup repair console, fixmbr...restarted the pc again, installed ubuntu, everything went great. But now, when I changed my screen resolution a part of the screen was using the wallpaper before I wiped ubuntu.

    My question is:
    Is it possible that some of the configs, settings didn't get deleted? Or are they stored anywere else besides the ubuntu '/' and swap partition?

  10. #20
    Join Date
    Jun 2007
    Location
    United Kingdom
    Beans
    283
    Distro
    Ubuntu 8.04 Hardy Heron

    Re: A rootkit entered my PC, what can I do?

    That depends - do you have any other partitions, e.g. a partition mounted to /home?

Page 2 of 3 FirstFirst 123 LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •