Re: hacked

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



>I can delete everything in the 2 directories, and edit/change the 
>php.php file to empty it out because it was a php script that allowed 
>someone to do anything on the server they wanted, but I can not for 
>the life of me delete them.  I thought maybe they replaced the 
>/bin/rm file, but it does not appear to be a hacked "rm".

Run lsattr on the files.  You might have to use chattr to allow you to
delete them.

No clue on the other stuff.

MB
-- 
e-mail: vidiot@xxxxxxxxxx                                /~\ The ASCII
                                                         \ / Ribbon Campaign
[So it's true, scythe matters.  Willow  5/12/03]          X  Against
Visit - URL: http://vidiot.com/                          / \ HTML Email

-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux