There is something worse than being hacked. It's an unreliable hard disk
system, usually involving the cabling. (However, the time I saw it nail
a Linux install it involved IDE drives in a machine with an old Adaptec
2940 controller. Adaptec had (as usual) screwed up their ROM code and
generated, somehow, an occasional bad bit every megabyte or so. Eventually
the damage accumulated to something of the level he are seeing. Fix the
hardware until you are sure it is bulletproof. Then reformat and reinstall.
Sadly, there is likely a lot of data loss involved.
{^_^}
----- Original Message -----
From: "M A Young" <m.a.young@xxxxxxxxxxxx>
> Mike wrote:
> > Hi
> > I have a horrible feeling that my system may have been compromised
> >
> > I have a file libwrap.a (part of tcp_wrappers) like this
> >
> > ?r-x-wxrwt 26977 25716 159071 1969188457 May 4 2031
> > /usr/lib/libwrap.a
>
> You typically get this sort of thing when something has been writing data
> over your inode table. If you haven't already done so, fsck the file
> system from the rescue disk as there may well be other damage that isn't
> obvious. It is more likely there was some system problem rather than a
> hacker, and you might be able to clear up the problem in this case if
> there is not too much damage by using rpm -Va and reinstalling any damaged
> packages, but unless you can work out the cause the problem could reoccur.
