Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 21 Feb 2002 16:21:48 -0500
From:      Peng He <penghe@tsp.ece.mcgill.ca>
To:        Jim Geovedi <negative@australia.edu>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: /bin/.login: No Such File or Directory
Message-ID:  <3C7564EC.68EC2A8D@tsp.ece.mcgill.ca>
References:  <LPBBLOJLMKJKOHDMDAJOKEEKCFAA.penghe@tsp.ece.mcgill.ca> <20020220212636.A13295@subtype.v28.errorflag.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Jim Geovedi wrote:

> On Tue, Feb 19, 2002 at 08:14:53PM -0500, Peng He wrote:
> > Dear all,
> > My FreeBSD 4.2(in a PC) has the following problem:
> >
> > when I try to login, whatever I type, after an Enter, the system always
> > says:
> >
> > /bin/.login: no such file or directory.
> >
> > Therefore I can not login into the system , but FTP is OK. So, why? Could
> > you pls copy your .login file in usr/bin/ to me? Thank you very much!!
> >
> > Best Regards,
> > Peng He
>
> is you machine got hacked?
>
> check your login binary,
>     # strings /usr/bin/login
> if you find something that unusual, then replace the login binary
> by installing the new one from /usr/src/usr.bin/login
> there's no .login in any BSD system.
>
> i guess your login binary is trojaned by universal login trojan.
>     http://packetstormsecurity.nl/UNIX/penetration/rootkits/ulogin.c
>
> --
> Jim Geovedi,

Dear Jim Geovedi,
Thank you so much for your help!  Someone hacked into my two computers and
changed the login bunary in both computer while keeping the same filesize.
Then following your procedures, the problem has been solved. Thanks again.

Best Regards,
Peng He



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3C7564EC.68EC2A8D>