Re: [newbie] Me thinks I got a virus
On Wed, 01 Oct 2003 18:48, Raffaele Belardi wrote: I think e2fschk is a front end that invokes the correct fsck.* program. If you type man fsck.ext3 you are shown the e2fschk man page. On my MDK9.1 there is no fsck.reiserfs command, only fsck.ext3. Could it be an alias? How 'bout /sbin/reiserfsck? Sharrea -- Help Microsoft stamp out piracy - give Linux to a friend today Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Me thinks I got a virus
On Thu, 2003-10-02 at 02:46, Sharrea Day wrote: On Wed, 01 Oct 2003 18:48, Raffaele Belardi wrote: I think e2fschk is a front end that invokes the correct fsck.* program. If you type man fsck.ext3 you are shown the e2fschk man page. On my MDK9.1 there is no fsck.reiserfs command, only fsck.ext3. Could it be an alias? How 'bout /sbin/reiserfsck? After a little digging I found reiserfsck and was using it to check my partitions from a rescue book and everything checked out ok. I just don't understand why no info is displayed when linux is restarted after a crash. BTW since I think my HD and partitions are ok, I'm using memtest to check my RAM and cache and it isn't looking good, but that is for another thread. Thanks Terry -- Terence Golightly [EMAIL PROTECTED] Mandrake 9.1 - 2.4.21-0.13mdk | Gnome 2.0 | Evolution 1.4.4 | Opera 7.11 Soyo Dragon Plus K7VXA-ZBA2 256MB AMD Athlon(tm) 1250mhz | nVidia Riva TNT Model 64 | Plextor CD-R PX-W1210A Maxtor 6Y080P0 80GB | Media Electronices CM8738 5 Channel Sound VT6102 Rhine II 10/100 Ethernet | Monitor Sony CPD-A200 --Just a Newbieo- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Me thinks I got a virus
I think e2fschk is a front end that invokes the correct fsck.* program. If you type man fsck.ext3 you are shown the e2fschk man page. On my MDK9.1 there is no fsck.reiserfs command, only fsck.ext3. Could it be an alias? The command should output something. In my case the output is (hda1 is an ext3 partition): [EMAIL PROTECTED] tmp]# e2fsck -f /dev/hda1 e2fsck 1.32 (09-Nov-2002) Pass 1: Checking inodes, blocks, and sizes Pass 2: Checking directory structure Pass 3: Checking directory connectivity Pass 4: Checking reference counts Pass 5: Checking group summary information /dev/hda1: 3914/895840 files (1.1% non-contiguous), 1553092/1791239 blocks raffaele [EMAIL PROTECTED] wrote: On Tue, 2003-09-30 at 02:55, Raffaele Belardi wrote: Or bad disk.I've had two disks breaking up recently, behaviour is always _very_ strange. You could check partitions with # e2fschk -f -c /dev/hda? -f forces the check -c performs bad block scan (I've never done this, don't know how long it takes) Substitute hda? with the name of your partitions. Does that command work with Reiserfs partitions? I've tried to check /home by doing an init 1 as su and running fsck.reiserfs it doesn't display anything and the command prompt is redisplayed. I'll try the rescue disk next. Thanks, Terry snip Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Me thinks I got a virus
I use Journalling FS too (ext3) and, according to man, e2fsck can process ext3 also: E2fsck also supports ext2 filesystems countaining a journal, which are also sometimes known as ext3 filesystems, by first applying the journal to the filesystem before continuing with normal e2fsck processing. I don't know if ReiserFS is different and requires a different tool. raffaele [EMAIL PROTECTED] wrote: Oops, I'm (apparently) using Journalised FS and that seems only to be for ext2. Any ideas on checking sectors and marking bad ones bad on a harddrive which uses JFS? On Wednesday 01 October 2003 02:49 am, you wrote: You have to be root for that command. It is not in the path for normal users (it is in /sbin/e2fsck). raffaele [EMAIL PROTECTED] wrote: I'm not able to find that file on my harddrive, nor in the MCC installation. I get an error message that there is no such command. I'm using M9.1 here. Raffaele Belardi [EMAIL PROTECTED]@linux-mandrake.com on 09/29/2003 11:55:58 PM Or bad disk.I've had two disks breaking up recently, behaviour is always _very_ strange. You could check partitions with # e2fschk -f -c /dev/hda? -f forces the check -c performs bad block scan (I've never done this, don't know how long it takes) Substitute hda? with the name of your partitions. You need to be root and the partitions must not be mounted. The easiest way to do that is to boot from the mandrake CD1 and type F1-rescue. raffaele . Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Me thinks I got a virus
On Wed, 01 Oct 2003 17:03:29 +0200 Raffaele Belardi [EMAIL PROTECTED] wrote: I use Journalling FS too (ext3) and, according to man, e2fsck can process ext3 also: E2fsck also supports ext2 filesystems countaining a journal, which are also sometimes known as ext3 filesystems, by first applying the journal to the filesystem before continuing with normal e2fsck processing. I don't know if ReiserFS is different and requires a different tool. raffaele snickle! yes it does... reiserfs-progs IIRC... I have never used it...but I did find too that if you reinstall at all, MDK installer wants to remove it b/c it conflicts with somethng else!? Like a Rock (stone?) , Femme Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Me thinks I got a virus
Or bad disk.I've had two disks breaking up recently, behaviour is always _very_ strange. You could check partitions with # e2fschk -f -c /dev/hda? -f forces the check -c performs bad block scan (I've never done this, don't know how long it takes) Substitute hda? with the name of your partitions. You need to be root and the partitions must not be mounted. The easiest way to do that is to boot from the mandrake CD1 and type F1-rescue. raffaele [EMAIL PROTECTED] wrote: Terence J. Golightly wrote: Are you sure no one else had access to the machine while you were away? No just me. The machine has only one account on it. Did you load any new software on the machine before going away and shutting it down that may have been compromised? No not recently. Thanks, Terry Hi Terry, It really sounds like bad RAM. Have you another stick to test with? Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Me thinks I got a virus
On Tue, 2003-09-30 at 02:55, Raffaele Belardi wrote: Or bad disk.I've had two disks breaking up recently, behaviour is always _very_ strange. You could check partitions with # e2fschk -f -c /dev/hda? -f forces the check -c performs bad block scan (I've never done this, don't know how long it takes) Substitute hda? with the name of your partitions. Does that command work with Reiserfs partitions? I've tried to check /home by doing an init 1 as su and running fsck.reiserfs it doesn't display anything and the command prompt is redisplayed. I'll try the rescue disk next. Thanks, Terry snip -- Terence Golightly [EMAIL PROTECTED] Mandrake 9.1 - 2.4.21-0.13mdk | Gnome 2.0 | Evolution 1.4.4 | Opera 7.11 Soyo Dragon Plus K7VXA-ZBA2 256MB AMD Athlon(tm) 1250mhz | nVidia Riva TNT Model 64 | Plextor CD-R PX-W1210A Maxtor 6Y080P0 80GB | Media Electronices CM8738 5 Channel Sound VT6102 Rhine II 10/100 Ethernet | Monitor Sony CPD-A200 --Just a Newbieo- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Me thinks I got a virus
Terence J. Golightly wrote: List, I just started my machine after leaving it off while away from home. I noticed that when I booted the machine, right over the third? column where the devices are listed with there associated interrupts was a rectangular section colored green with four greek letters shaped like Es (I can't remember the name of the letter its been too long) spaced like this: E EEE. The machine hung after that and I was forced to reset the unit. When it rebooted, I got a bios checksum error so I restarted again and reset the bios to optomized settings and the machine restarted (didn't see the colorized box again though). It did kill my menu with my logout buttons and a couple of buttons some other panels. I noticed that it took a long time for the file systems to be mounted and when it did final come up ( 1min) I logged in and opened gqview. The box locked up I tried the AltSysReq R,S,E,I,U,B key sequence but to no avail. I reset it. I'm back up and creating this document. My first question is obvious: How to get rid of the virus? How to check why the alt sysrqst key sequence isn't working? Thanks with Urgency, Terry P.S. I hesitate to go in as superuser, I don't know if the virus is scanning for passwords or not. Hi Terry, I seriously doubt you've got a virus. If you do, and I don't think thats what it is, then that would be something very new. Secondly, what is alt sysrqst key sequence? I've never heard of that for restarting a linux machine. OTOH, if you're refering to CTRL+ALT+DEL then that would and should usually restart a machine unless it is seriously locked up at which point the only way to get one going again is a hard boot. ( hitting the reset button. ) To my knowledge there are only two viruses in the linux world and they haven't been around for quite some time. So I really don't think thats your problem. It sounds more like a hardware problem. Could be bad RAM that is causing the kernel some very nasty headaches. Has this machine ever acted strangely before? Are you sure no one else had access to the machine while you were away? Did you load any new software on the machine before going away and shutting it down that may have been compromised? -- Mark If necessity is the mother of invention, then who's the father? --- Paid for by Penguins against modern appliances(R) Linux User Since 1996 Powered by Mandrake Linux 8.2 9.1 ICQ# 27816299 Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Me thinks I got a virus
On Mon, 2003-09-29 at 17:13, Mark Weaver wrote: snip Mark; I think he's referring to the series of steps in http://www.mandrakeuser.org/docs/mdoc/ref/ts-system-freeze.html Hi Terry, I seriously doubt you've got a virus. If you do, and I don't think thats what it is, then that would be something very new. Secondly, what is alt sysrqst key sequence? I've never heard of that for restarting a linux machine. OTOH, if you're refering to CTRL+ALT+DEL then that would and should usually restart a machine unless it is seriously locked up at which point the only way to get one going again is a hard boot. ( hitting the reset button. ) To my knowledge there are only two viruses in the linux world and they haven't been around for quite some time. So I really don't think thats your problem. It sounds more like a hardware problem. Could be bad RAM that is causing the kernel some very nasty headaches. Has this machine ever acted strangely before? Are you sure no one else had access to the machine while you were away? Did you load any new software on the machine before going away and shutting it down that may have been compromised? Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Me thinks I got a virus
On Mon, 2003-09-29 at 18:13, Mark Weaver wrote: Terence J. Golightly wrote: List, I just started my machine after leaving it off while away from home. I noticed that when I booted the machine, right over the third? column where the devices are listed with there associated interrupts was a rectangular section colored green with four greek letters shaped like Es (I can't remember the name of the letter its been too long) spaced like this: E EEE. The machine hung after that and I was forced to reset the unit. When it rebooted, I got a bios checksum error so I restarted again and reset the bios to optomized settings and the machine restarted (didn't see the colorized box again though). It did kill my menu with my logout buttons and a couple of buttons some other panels. I noticed that it took a long time for the file systems to be mounted and when it did final come up ( 1min) I logged in and opened gqview. The box locked up I tried the AltSysReq R,S,E,I,U,B key sequence but to no avail. I reset it. I'm back up and creating this document. My first question is obvious: How to get rid of the virus? How to check why the alt sysrqst key sequence isn't working? Thanks with Urgency, Terry P.S. I hesitate to go in as superuser, I don't know if the virus is scanning for passwords or not. Hi Terry, I seriously doubt you've got a virus. If you do, and I don't think thats what it is, then that would be something very new. Secondly, what is alt sysrqst key sequence? I've never heard of that for restarting a linux machine. On Mon, 2003-09-29 at 17:13, Mark Weaver wrote: snip Mark; I think he's referring to the series of steps in http://www.mandrakeuser.org/docs/mdoc/ref/ts-system-freeze.html Exactly. snip To my knowledge there are only two viruses in the linux world and they haven't been around for quite some time. I don't think it is really a virus only that I noticed this on the POST. It just reminds me of the bad old days of dos viri. I am having some strange things happening when it starts. fsck apparently check all my partitions just root after a freeze. So I really don't think thats your problem. It sounds more like a hardware problem. Could be bad RAM that is causing the kernel some very nasty headaches. Yeah going to have to consider that after I check my disk partitons. Has this machine ever acted strangely before? Are you sure no one else had access to the machine while you were away? No just me. The machine has only one account on it. Did you load any new software on the machine before going away and shutting it down that may have been compromised? No not recently. Thanks, Terry -- Terence Golightly [EMAIL PROTECTED] Mandrake 9.1 - 2.4.21-0.13mdk | Gnome 2.0 | Evolution 1.4.4 | Opera 7.11 Soyo Dragon Plus K7VXA-ZBA2 256MB Ram AMD Athlon(tm) 1250mhz | nVidia Riva TNT Model 64 | Plextor CD-R PX-W1210A Maxtor 6Y080P0 80GB | Media Electronices CM8738 5 Channel Sound VT6102 Rhine II 10/100 Ethernet | Monitor Sony CPD-A200 --Just a Newbieo- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Me thinks I got a virus
On Mon, 2003-09-29 at 18:49, Glenn Wright wrote: On Mon, 2003-09-29 at 17:13, Mark Weaver wrote: snip Mark; I think he's referring to the series of steps in http://www.mandrakeuser.org/docs/mdoc/ref/ts-system-freeze.html snip __ Yes thats it!! Any ideas why it won't work for me? Thanks, Terry -- Terence Golightly [EMAIL PROTECTED] Mandrake 9.1 - 2.4.21-0.13mdk | Gnome 2.0 | Evolution 1.4.4 | Opera 7.11 AMD Athlon(tm) 1250mhz | nVidia Riva TNT Model 64 | Plextor CD-R PX-W1210A Maxtor 6Y080P0 80GB | Media Electronices CM8738 5 Channel Sound VT6102 Rhine II 10/100 Ethernet | Monitor Sony CPD-A200 --Just a Newbieo- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Me thinks I got a virus
On Monday 29 September 2003 08:52 pm, Terence J. Golightly wrote: I don't think it is really a virus only that I noticed this on the POST. It just reminds me of the bad old days of dos viri. I am having some strange things happening when it starts. fsck apparently check all my partitions just root after a freeze. So I really don't think thats your problem. It sounds more like a hardware problem. Could be bad RAM that is causing the kernel some very nasty headaches. Yeah going to have to consider that after I check my disk partitons. Has this machine ever acted strangely before? Are you sure no one else had access to the machine while you were away? No just me. The machine has only one account on it. Could be a heat issue if it was on for a long time. Possible that something got too hot and caused a fault. -- Bryan Phinney Software Test Engineer Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
