Computing.Net > Forums > Solaris > Restore /bin directory (hacked !!!)

Restore /bin directory (hacked !!!)

Reply to Message Icon

Original Message
Name: Alejandro Cabrera
Date: November 10, 2002 at 10:02:04 Pacific
Subject: Restore /bin directory (hacked !!!)
OS: Solaris 7
CPU/Ram: Sparc / 128 MB
Comment:

I've been attacked for a hacker, but I suppose it was only a "scripting kiddies" way.

My / (root) and /usr file systems are OK, but I need to recover at least the content of /bin, /sbin, /usr/bin and /usr/sbin in order to clean the system.

I have a backup level 0 made with the "ufsdump" utility, but when I want to recover the /bin directory I see that it's not a directory but a file. I list the / directory using the "ufsretore" utility:

ufsrestore>ls
bin
dev/
cdrom/
etc/
var/
....
....

and in the guidelines from docs.sun.com there is an example with the same directory structure.

I ask you: is it OK ???? Can I restore the /bin directory with the ufrestore utility with
intercative mode:

ufsrestore>add bin (within / directory)

Why bin appears to be a file and not a directory ????

Thanks a lot and regards.

Alejandro Cabrera.



Report Offensive Message For Removal


Response Number 1
Name: sukrut
Date: November 10, 2002 at 23:15:32 Pacific
Reply: (edit)

You have to restore /usr filesystem to obtain bin indside usr and after restore delete resotesymtable.

Thanks Regards
Sukrut


Report Offensive Follow Up For Removal







Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: Restore /bin directory (hacked !!!)

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software




Have you ever used OpenOffice?

Yes, as my main suite.
Yes, occationally.
Yes, but only once.
No, never.


View Results

Poll Finishes In 4 Days.
Discuss in The Lounge