[iconicmoronic]

someone has done something!
i don't have any permissions to any of my folders and they changed sudoers. far as I can see i'm the only local user and remote connection is not enabled.
there's a mystery folder in my filesystem, its name is either in a foreign language (because I don't have other languages) or characters not on the panel.
looks like it sayd howdy or how do you or how do you do.
very annoying.

i can't access synaptic, or login window, anything administrative!

???

What happened?

[zacke]

You may want to run chkrootkit or rkhunter!
To do this, reboot into single user mode, and then download/install/run it.

[iconicmoronic]

only way i can do that is to add rw init=/bin/bash
logon as root.
does that sound right exactly?

[iconicmoronic]

how do you login to single user mode?
i only login so there are the 7 terminals, i was just wondering how to make only one terminal available. got an answer?

[zacke]

What linux distribution are you using?

[iconicmoronic]

feisty ubuntu 7.04

isn't 7.10 coming out in like 10 days?

[zacke]

Well, it's supposed to come out sometime this month, but it's still in Beta.
Check out this post:

http://ubuntuforums.org/showpost.php...06&postcount=4

[lotuseclat79]

It appears you have been hacked. What firewall are you running? Any? What servers have you setup to run? What ports? You may need to harden your configuration to avoid such incidents in the future.

The command: $ telinit 1
should get you into single user mode.

You can get chkrootkit here or here and
rkhunter here, however as long as you can identify the folder, you should be able to delete it, and then reboot from single user mode by issuing the command:
$ telinit 6

-- Tom