Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 22 Mar 2002 07:57:52 +1200
From:      Jonathan Chen <jonc@chen.org.nz>
To:        RICH CUR <rphilipa@curacaotelecom.com>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: Urgent!!! need some advice
Message-ID:  <20020322075751.A8594@grimoire.chen.org.nz>
In-Reply-To: <008001c1d176$69db2440$5a0a0a0a@ctinter.net>; from rphilipa@curacaotelecom.com on Fri, Mar 22, 2002 at 03:50:10AM -0400
References:  <008001c1d176$69db2440$5a0a0a0a@ctinter.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Mar 22, 2002 at 03:50:10AM -0400, RICH CUR wrote:
> Look I have a problem with my DNS server that's running  freeb BSD 4.0,
> 
> For the last two days I'm not able to telnet in the console, I receive this message
> 
> FreeBSD/i386 (ns1.ct-inter.net) (ttyp0)
> 
> /bin/.login: No such file or directory
> 

That looks like you've been a victim of a root-kit hack attack. You're
gonna have to reinstall the O/S to clean that up.

> If I goes to my console and try to login from their its still give me login as my first option and then I pres enter it goes to login back.
> 

Go to single-user. If you haven't the the Ctrl-Alt-Del enabled, the
only way to do this without root access is to hit the reset button and
hope that nothing gets lost. Save your data, and reinstall the O/S and
upgrade to the latest. There have been quite a few security adivsories
resolved since 4.0
-- 
Jonathan Chen <jonc@chen.org.nz>
----------------------------------------------------------------------
             "A person should be able to do a small bit of everything,
                                        specialisation is for insects"

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020322075751.A8594>