Suspected rootkit

This forum is for Marvell Kirkwood devices such as the GoFlex Home/Net, PogoPlug v1/v2, SheevaPlug, and ZyXEL devices.

Re: Suspected rootkit

Postby jcconnell » Tue Dec 03, 2013 4:06 pm

Should I have done something differently? Can't tell what your implying.
jcconnell
 
Posts: 45
Joined: Thu May 02, 2013 1:10 am

Re: Suspected rootkit

Postby WarheadsSE » Tue Dec 03, 2013 4:11 pm

I'm suggesting, please do not create posts that are several scrolls of my 1080p monitors for the output of a log.
Core Developer
Remember: Arch Linux ARM is entirely community donation supported!
WarheadsSE
Developer
 
Posts: 6807
Joined: Mon Oct 18, 2010 2:12 pm

Re: Suspected rootkit

Postby WarheadsSE » Tue Dec 03, 2013 4:29 pm

$this->bbcode_second_pass_quote('jcconnell', 'I') was under the impression that an environment, however small, would be launched and permit at least SSH.

If you have UBIT installed, this might be the case. That is not necessarily the case however. You could configure netconsole (see advanced tab on platform/device page).
Core Developer
Remember: Arch Linux ARM is entirely community donation supported!
WarheadsSE
Developer
 
Posts: 6807
Joined: Mon Oct 18, 2010 2:12 pm

Re: Suspected rootkit

Postby pepedog » Tue Dec 03, 2013 4:57 pm

It looks like a weak password. I lectured some 8 to 11 y/o kids on passwords, then created a user called word with password called word. 2 days later I saw things by accident, luckily they only were in for a short while.

Looks like they were running x86 binaries and getting nowhere
pepedog
Developer
 
Posts: 2431
Joined: Mon Jun 07, 2010 3:30 pm
Location: London UK

Re: Suspected rootkit

Postby jcconnell » Tue Dec 03, 2013 6:28 pm

pepedog, still a good idea to wipe and reinstall I presume?

Regarding the environment loaded when no drives (SATA or USB) are connected, I've been reading up on the Doozan Rescue/Recovery system V2.8.2 detailed here: http://forum.doozan.com/read.php?4,7915

Is something I should be looking into installing?
Can it be installed from a USB thumbdrive running Alarm?
jcconnell
 
Posts: 45
Joined: Thu May 02, 2013 1:10 am

Previous

Return to Marvell Kirkwood

Who is online

Users browsing this forum: No registered users and 21 guests