G+_Eddie Foy Posted June 24, 2015 Share Posted June 24, 2015 I got my very first virus/malware ever! (Well, at least that I know of.) After ~35 years of CP/M, DOS, Desqview/X, OS/2, All Windows, OSX, and Linux (and probably missing one or two. Never could get BeOS installed.) And get his Windows fan boys, its on Linux Just a Denial of Service. But being a bugger to fix on a live system. Pulled drive and using different 'puter. Link to comment Share on other sites More sharing options...
G+_Travis Hershberger Posted June 24, 2015 Share Posted June 24, 2015 Sending out a dos or on the receiving end? Frankly once you've been bitten the thing to do is reinstall the os. Do you have /home on a different partition? Us Linux fanboys know this stuff happens. That's why we have tools like fail2ban, chkrootkit, and clamav! Link to comment Share on other sites More sharing options...
G+_Eddie Foy Posted June 24, 2015 Author Share Posted June 24, 2015 Sending out. This was my NAT table flooding prob. Its actually kinda cool. Random bin files created. Kill one and it spawns new ones. Killed everything in the init/initd, rc.x 's and everywhere else I could think of. Find the IP, adjust iptables, reload GW and its a new IP backing up now. Will re-install. (just hate the re-conjiggering) I just had to poke at the linux fanbois who say "Don't have to worry about Linux, it never gets malware or virii" (Apple fanbois right there with them in the delusion.) Link to comment Share on other sites More sharing options...
G+_Travis Hershberger Posted June 24, 2015 Share Posted June 24, 2015 Eddie Foy I'll admit to being a Linux fanboy. I also just shake my head at people that insist they're secure just because they're running Linux/MAC instead of Windows. I know it's a pain, but at least all the user specific settings will be back when /home is restored. That's the only directory I normally keep on it's own partition anymore. Quite the experience reformatting root and reinstalling just to have their original desktop pop right back up from where it left off. Link to comment Share on other sites More sharing options...
G+_Eddie Foy Posted June 24, 2015 Author Share Posted June 24, 2015 In 2014 Windows was the most secure followed by linux then mac. Apple doesn't implement security well., on the Mac (ASLR being one of them) Linux is nice, until it goes south. People have love/hate relationships? I have school-girl fatal-attraction / major psychotic hatred rage relationship with linux :) (Vi vs Emacs? That's like the Dr. asking leaches or thumb screws) It misses the #1 reason for a computer: to make life easier. But I do love the fact that most every config is just a text file to fix. (no registry! which IMOHO is the biggest reason for Windows 'bloat' over time) Now finding that text file and understanding it is another story. I think it fits 2 types the best, the opposite ends of the spectrum: uber geek who wants to tweak & play and grandma who does next to nothing. Link to comment Share on other sites More sharing options...
G+_Travis Hershberger Posted June 24, 2015 Share Posted June 24, 2015 I don't use vi or Emacs, neither of them are easy or quick. Don't even touch em anymore since I found nano. Nano doesn't come already installed on most distros, but it's always in the default repositories. Can I use vi? Yes, yes I can. Do I want to use vi? I'd rather have a root canal. Link to comment Share on other sites More sharing options...
G+_Eddie Foy Posted June 24, 2015 Author Share Posted June 24, 2015 nano! (or pico or joe) Link to comment Share on other sites More sharing options...
G+_Jason Marsh Posted June 25, 2015 Share Posted June 25, 2015 Eddie Foy That's crazy-pants. Is this a machine on your internal network or is it something that lived in a DMZ? Which distro is the infected system, and any idea how it got infected? I saw my first cryptolocker a few weeks ago, on a grandma's system. I didn't ask if she'd had a call from a "microsoft tech support" scammer, went straight to DBAN and reinstall because she was old-school, had all her precious pictures on film. BTW, +1 for nano. Link to comment Share on other sites More sharing options...
G+_Jason Marsh Posted June 25, 2015 Share Posted June 25, 2015 OMG I was so paranoid when rebuilding that machine with cryptolocker I shut down everything on my network until the machine was ready to go back to customer, just in case ;) Link to comment Share on other sites More sharing options...
G+_Michael Heinz Posted June 25, 2015 Share Posted June 25, 2015 Years ago I was running an apache server in my basement and every 3 days the HD would get corrupted and the whole machine would stop. I finally changed distros and the problem went away... It wasn't till later that I realized that the version of apache had had a known security issue and someone was repeatedly using it to try and install a root kit - but they kept flubbing the install which is why the machine would crash. Link to comment Share on other sites More sharing options...
G+_Eddie Foy Posted June 25, 2015 Author Share Posted June 25, 2015 Jason Marsh its on my LAN at times. Its a laptop (Kali) I play with when out and about. But was always behind some sort of firewall, if only NAT. Musta clicked something bad. Its been flushed and reinstalled. Now reconjiggering everything. (making scripts to set up the way I like) Link to comment Share on other sites More sharing options...
G+_Jason Marsh Posted June 25, 2015 Share Posted June 25, 2015 I wonder if there's a way to have Kali boot from a static image, with symlinks pointing to configs on a separate, writable partition, so that you could simply wipe the writable partition and boot from a clean image. Then again, there may be rootkits that could work around this and write to your read-only boot image. At least you can wipe and reinstall. If only the apparently genius malware developers would put their talents to work FOR the computing world rather than against it :( Link to comment Share on other sites More sharing options...
G+_Eddie Foy Posted June 25, 2015 Author Share Posted June 25, 2015 You can make a bootable USB stick with persistence. And just dd (disk destroyer) it every once in a while. Would also force good house keeping being on a small 'drive' Link to comment Share on other sites More sharing options...
Recommended Posts