Printable View
Hello guys, yep i have to ask u about something. Look at this:
http://files.tinypic.pl/i/00567/2o9qhcqor9in.png
i have no idea why i got this error, i just know after 3-5 min it destroy whole my network on virtualbox and also on my pc which i host it.
I have also dedi serwer, and its happens the same thing!
No idea why i got these errors at start.
That error: usage: kill ... appear all time, every 5seconds, NO IDEA?
you got a cron thats running and you dont have iptables susefirewall correctly installed (maybe incorrect path).
hehe i found same issue look:
http://mangolassi.it/topic/1701/linux-issue/5
looks like its a kind of backdoor.
U know what is best? that i have just installed files from some repack cabal, i dont remember which one.
its a fresh centos, with update, and installed repack cabal :D
Beware guys, better scan, or check whole repack which u use, i see some pepole here are kinda jelly or smth.
I will try to spy what have inlcuded that backdoor.
I already fixed it, if someone will have the same problem:
vi /etc/rc.d/rc.local
remove every line like this:
cd /etc;./dsfrefr
cd /etc;./sfewfesfs
cd /etc;./gfhjrtfyhuf
cd /etc;./rewgtf3er4t
cd /etc;./sdmfdsfhjfe
save & exit.
now, remove file .SSH2 in /etc/
sudo rm /etc/.SSH2
now if u dont have htop, install it.
run htop, check if u have process like
/tmp/.sshddxxxxxxxxxx
kill it. also kill
/etc/.SSH2
restart machine, have fun with unbackdoored system.
I hope soon i gonna get from where i came.