Prosíme přihlašte se nebo zaregistrujte.

Přihlašte se svým uživatelským jménem a heslem.
Vaše pomoc je stále potřeba!

Autor Téma: virus?  (Přečteno 14484 krát)

Pavel Půlpán

Re: virus?
« Odpověď #50 kdy: 30 Září 2007, 19:46:48 »
Aaa jeee! 8) Cejtim siru... ;D A ta je blizko ohni... ;D
Je to divny, ze to tak reknu. Ale na tom co rekl Radek Hulan neco pravdy bude. Ohledne viru je vetsinou problem na strane uzivatele. Naopak tvrzeni ze viry neexistuji je... ponekud nepresne? 8)

Pavelp

  • Host
Re: virus?
« Odpověď #51 kdy: 30 Září 2007, 19:55:33 »
Tak naposledy, nez me admini utrou.
Mne "popudilo", ze RH odpovedel timto zpusobem a timto tonem. Jednak pouzil nevhodny priklad, v Linuxu muze uzivatel klikat na .exe prilohy doaleluja a nic se nestane. Takze pouzil priklad zrejme z jineho OS. Jestli je tazatel opravdovy zacatecnik, musi byt zmateny.  A to, ze vsichni, kteri maji viry jsou pitomci se mi taky nelibi. To je zjednoduseni takove, ze ukazuje spise na neznalost.
Koncim tema.

A squela vlastnost noveho fora mi doporucila abych to upravil, ze prisla odpoved. Dobry !!!
Tak to cinim. Zadna sira, zadny ohen. S nikym se nehadam, nikoho nenapadam. Je to forum o Linuxu a v nem viry  NEJSOU !!!
« Poslední změna: 27 Října 2007, 15:00:41 od Anna Taliánová »

Roman "Schmaker" Šmakal

  • Stálý člen
  • **
  • Příspěvků: 1205
Re: virus?
« Odpověď #52 kdy: 30 Září 2007, 19:56:09 »
Přesnější by bylo říci "viry pro Linux neexistujou" ;)

Nevím jak ve Vistě, tam už je to snad fixnuté, ale v XPčkách (ano, několik let starý OS, ale stále nejpoužívanější) se nedá moc dlouho fungovat bez antiviru, antispywaru a tak dále...

Každopádně pravda je, že nemálo virů si uživatel přitáhne sám (vzpomínám na skript, který mi kdysi posílala kámoška - 30 krát vysunout a zasunout CDRomku to mělo ... ještě že jsem si ho prohlédnul... ale spousta ostatních se nachytala.. bylo by zajímavé, kdyby v nich bylo cosi jako format C: :) )... Lidi by se měli nejdřív rozhlédnout na obě strany, než přejdou :)
« Poslední změna: 27 Října 2007, 15:01:35 od Anna Taliánová »
Linux Gaming Clan leader
Konference na linuxclan@chat.linjab.net

Tomáš "Piškot" Petera

  • Stálý člen
  • **
  • Příspěvků: 839
    • http://www.spolnet.cz
Re: virus?
« Odpověď #53 kdy: 30 Září 2007, 20:08:41 »
Už to funguje ... tedy než se rozhodnu to zase poladit.

Milhouse

  • Moderátor
  • Závislák
  • ***
  • Příspěvků: 5726
Re: virus?
« Odpověď #54 kdy: 30 Září 2007, 20:11:01 »
http://www.root.cz/clanky/kaspersky-viry-pro-linux-prichazeji/
Jo, a když si přečtete diskuzi, tak to lidé dementujou. Takže to není berná mince...
« Poslední změna: 27 Října 2007, 15:01:52 od Anna Taliánová »

N. Á. V. O. D. Y.
 "...naše práce není vidět, ale je důležitá!"

Tomáš "Piškot" Petera

  • Stálý člen
  • **
  • Příspěvků: 839
    • http://www.spolnet.cz
Re: virus?
« Odpověď #55 kdy: 30 Září 2007, 20:19:04 »
Ale názor. Nevěřím že dříve nebo později něco nepřijde, je to krátkozraké. Ale to už je na jinou diskuzi. Založíme třeba jiné vlákno s touhle problematikou.
« Poslední změna: 27 Října 2007, 15:02:04 od Anna Taliánová »
Už to funguje ... tedy než se rozhodnu to zase poladit.

Czario

  • Stálý člen
  • **
  • Příspěvků: 639
  • skill :: passive-llama
Re: virus?
« Odpověď #56 kdy: 30 Září 2007, 21:15:46 »
založeno forum ohledně virů. Obecná diskuse: Viry v Linuxu
http://forum.ubuntu.cz/index.php?topic=14551.msg104809#msg104809
« Poslední změna: 27 Října 2007, 15:03:13 od Anna Taliánová »

messner

  • Návštěvník
  • Příspěvků: 97
Re: virus?
« Odpověď #57 kdy: 30 Září 2007, 22:40:32 »
No, adduser jmeno a potom jeste passwd jmeno jsem zkousel nekolikrat, ale nelze se pod novym jmenem prihlasit. Je to stejne jako s puvodnim. Pochopil jsem, ze v adresari home maji byt nejake soubory, on je vsak uplne prazdny. To uz jsem psal nekolikrat. Myslim, ze pri me urovni znalosti je reinstalace to nejjednodussi, co mohu udelat.
Ted az do patku u sveho pocitace nebudu a tak se do te doby neozvu a zabyvat se tim budu az potom.

Radek Hulán

  • Aktivní člen
  • *
  • Příspěvků: 158
  • Vista x64
Re: virus?
« Odpověď #58 kdy: 30 Září 2007, 23:23:07 »
Pro uživatele je vir i "paris_hilton_top.sh".

Samozřejmě. V dnešní době, kdy každý i freemail má kvalitní antivirus, antispam a antiphishing filtr není de-facto možné přijít do styku s virem na libovolném OS, pokud uživatel vyloženě neholduje warezu a nestahuje si podezřelé spustitelné soubory z různých webů, cracky a podobné věci.

Princip "virů" je na všech OS stejný - sází na technickou blbost uživatele (to neznamená, že uživatel je blb, jen nerozumí IT). A je úplně jedno, zda se ten virus jmenuje BIG_TITS.exe či BIG_TITS.sh (s nastaveným executable flag).

Osobně nepoužívám antivirus snad 8 let a vím jediné - IT profesionál virus nezná. Používá legální SW a mozek (to je ten nejlepší antivirus). A "IT blbovi" (opět to nemyslím pejorativně, já jsem třeba zase blb na molekulární biologii) nepomůže nic...

To, že se spustí v skriptu "rm -rf" opravdu "virus" být nemusí, prostě se něco rozbalí do podadresáře, a pak jej zase smaže, jen to bylo špatně napsané a spustilo se to na /home/* (naštěstí nikoliv pod rootem). Každopádně sám od sebe se na žádném OS žádný kód nespustí, ten uživatel jej musel nějak zavolat..
« Poslední změna: 30 Září 2007, 23:26:04 od Radek Hulán »

Vico.B

  • Aktivní člen
  • *
  • Příspěvků: 263
Re: virus?
« Odpověď #59 kdy: 01 Října 2007, 07:19:33 »
Je to přesně tak jak říká Radek Hulán. Ten příkaz mohl být například v některém skriptu kterým se instalovala tiskárna... Přijde mi to logičtější než se hned začít bavit o virech ;)
Ještě nejsem tak starý abych si nechal vykat...

Toshiba Satellite M100-165, T2300, 2x2048, ATI X1400 powered by Ubuntu 8.04 Hardy Heron

messner

  • Návštěvník
  • Příspěvků: 97
Re: virus?
« Odpověď #60 kdy: 26 Října 2007, 23:34:18 »
Ze by ve skriptu, kterym se instaluje tiskarna bylo zrovna tohle? Udelal jsem chybu, podival jsem se pouze na posledni prikaz a uz ne na to, co mu predchazelo. Dalo by se to jeste z nejakeho souboru zjistit? Skoda, ze Linux neobsahuje zadny nastroj na obnovu smazanych souboru, nekdy by se hodil.

Zazalohoval jsem si to, co mi zbylo a nainstaloval jsem verzi 7.04 a provedl update na 7.10. Sice mi konecne funguje zvuk, ale zase mi nechodi tiskarna. (Epson Stylus D 88) Lezou z ni jenom prazdne listy. Nemohu nikde najit reseni tohoto problemu a to uz po nem patram dost dlouho.
« Poslední změna: 27 Října 2007, 15:11:04 od Anna Taliánová »

anicka

  • Host
Re: virus?
« Odpověď #61 kdy: 27 Října 2007, 15:12:04 »
Tak si zkuste založit téma třeba v rubrice "Pomoc s hardwarem" s názvem Vaší tiskárny - třeba Vám někdo poradí, kdo má/měl stejný problém a vyřešil ho.

messner

  • Návštěvník
  • Příspěvků: 97
Re: virus?
« Odpověď #62 kdy: 28 Října 2007, 20:43:13 »
Jen bych chtel jeste vedet, jestli ma Linux nekde ulozenou historii prikazu, kde by se dalo zjistit, co se vlastne tenkrat vsechno delo.


Toto je vypis /var/log/auth.log za zari:

Sep  1 00:17:01 localhost CRON[7220]: (pam_unix) session opened for user root by (uid=0)
Sep  1 00:17:01 localhost CRON[7220]: (pam_unix) session closed for user root
Sep  1 01:17:01 localhost CRON[8766]: (pam_unix) session opened for user root by (uid=0)
Sep  1 01:17:01 localhost CRON[8766]: (pam_unix) session closed for user root
Sep  1 01:31:00 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gedit /etc/sources.list
Sep  1 01:31:37 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gedit /etc/sources.list
Sep  1 01:32:25 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gparted
Sep  1 01:39:49 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gdebi-gtk --non-interactive /home/rak/Desktop/alsa-base_1.0.13-5_all.deb
Sep  1 02:17:02 localhost CRON[10632]: (pam_unix) session opened for user root by (uid=0)
Sep  1 02:17:08 localhost CRON[10632]: (pam_unix) session closed for user root
Sep  1 02:18:45 localhost sudo: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=pts/0 ruser= rhost=  user=rak
Sep  1 02:18:49 localhost sudo:      rak : 1 incorrect password attempt ; TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gedit /etc/sources.list
Sep  1 02:35:48 localhost gdm[3133]: (pam_unix) session closed for user rak
Sep  2 21:35:27 localhost gdm[3107]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost=  user=rak
Sep  2 21:35:46 localhost gdm[3107]: (pam_unix) session opened for user rak by (uid=0)
Sep  2 21:44:18 localhost gnome-screensaver-dialog: (pam_unix) authentication failure; logname= uid=1000 euid=1000 tty=:0.0 ruser= rhost=  user=rak
Sep  2 21:44:20 localhost gnome-screensaver-dialog: (pam_unix) authentication failure; logname= uid=1000 euid=1000 tty=:0.0 ruser= rhost=  user=root
Sep  2 21:46:11 localhost su[3844]: + pts/0 rak:root
Sep  2 21:46:11 localhost su[3844]: (pam_unix) session opened for user root by (uid=1000)
Sep  2 21:46:18 localhost su[3844]: (pam_unix) session closed for user root
Sep  2 21:46:18 localhost gdm[3107]: (pam_unix) session closed for user rak
Sep  2 21:51:08 localhost gdm[3133]: (pam_unix) session opened for user rak by (uid=0)
Sep  2 22:17:01 localhost CRON[4116]: (pam_unix) session opened for user root by (uid=0)
Sep  2 22:17:01 localhost CRON[4116]: (pam_unix) session closed for user root
Sep  2 23:17:01 localhost CRON[5515]: (pam_unix) session opened for user root by (uid=0)
Sep  2 23:17:01 localhost CRON[5515]: (pam_unix) session closed for user root
Sep  3 00:17:01 localhost CRON[6976]: (pam_unix) session opened for user root by (uid=0)
Sep  3 00:17:01 localhost CRON[6976]: (pam_unix) session closed for user root
Sep  3 00:33:21 localhost gdm[3133]: (pam_unix) session closed for user rak
Sep  7 21:39:39 localhost gdm[3139]: (pam_unix) session opened for user rak by (uid=0)
Sep  7 21:48:36 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gparted
Sep  7 22:17:01 localhost CRON[5349]: (pam_unix) session opened for user root by (uid=0)
Sep  7 22:17:01 localhost CRON[5349]: (pam_unix) session closed for user root
Sep  7 23:17:01 localhost CRON[6769]: (pam_unix) session opened for user root by (uid=0)
Sep  7 23:17:01 localhost CRON[6769]: (pam_unix) session closed for user root
Sep  8 00:02:31 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/update-manager
Sep  8 00:17:01 localhost CRON[10825]: (pam_unix) session opened for user root by (uid=0)
Sep  8 00:17:01 localhost CRON[10825]: (pam_unix) session closed for user root
Sep  8 00:19:18 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/update-manager -d
Sep  8 00:20:06 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/apt-get update
Sep  8 00:20:48 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/apt-get dust-update
Sep  8 00:21:09 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/apt-get dist-update
Sep  8 00:23:42 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/sbin/synaptic
Sep  8 00:28:58 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/apt-get cdrom/dist-update
Sep  8 00:29:08 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/apt-get /cdrom/dist-update
Sep  8 00:29:20 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/apt-get dist-update
Sep  8 00:29:46 localhost sudo:      rak : TTY=pts/0 ; PWD=/media/cdrom0 ; USER=root ; COMMAND=/usr/bin/apt-get dist-update
Sep  8 00:30:00 localhost sudo:      rak : TTY=pts/0 ; PWD=/media/cdrom0 ; USER=root ; COMMAND=/usr/bin/apt-get disc-update
Sep  8 00:42:15 localhost gdm[3139]: (pam_unix) session closed for user rak
Sep  8 00:44:12 localhost gdm[3141]: (pam_unix) session opened for user rak by (uid=0)
Sep  8 01:17:01 localhost CRON[4307]: (pam_unix) session opened for user root by (uid=0)
Sep  8 01:17:01 localhost CRON[4307]: (pam_unix) session closed for user root
Sep  8 02:17:01 localhost CRON[5789]: (pam_unix) session opened for user root by (uid=0)
Sep  8 02:17:01 localhost CRON[5789]: (pam_unix) session closed for user root
Sep  8 02:40:16 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/foomatic-gui
Sep  8 02:41:35 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/foomatic-gui
Sep  8 02:44:15 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/update-manager
Sep  8 02:46:43 localhost sudo:      rak : TTY=pts/0 ; PWD=/media/cdrom0 ; USER=root ; COMMAND=/usr/bin/update-manager
Sep  8 02:53:16 localhost sudo:      rak : TTY=pts/0 ; PWD=/media/cdrom0 ; USER=root ; COMMAND=/usr/bin/apt-get dist-upgrade
Sep  8 03:00:07 localhost gdm[3141]: (pam_unix) session closed for user rak
Sep  8 03:02:14 localhost gdm[3139]: (pam_unix) session opened for user root by (uid=0)
Sep  8 03:04:51 localhost sudo:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/usr/bin/apt-get dist-upgrade
Sep  8 03:08:16 localhost sudo:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/sbin/modprobe snd-via82xx
Sep  8 03:17:01 localhost CRON[4403]: (pam_unix) session opened for user root by (uid=0)
Sep  8 03:17:01 localhost CRON[4403]: (pam_unix) session closed for user root
Sep  8 03:37:13 localhost gdm[3139]: (pam_unix) session closed for user root
Sep  8 03:39:08 localhost gdm[3137]: (pam_unix) session opened for user rak by (uid=0)
Sep  8 03:43:45 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/sbin/modprobe snd-via82xx
Sep  8 03:48:27 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/disks-admin
Sep  8 03:48:29 localhost sudo:      rak : TTY=pts/1 ; PWD=/home/rak ; USER=root ; COMMAND=/bin/sh -c env LANG="cs_CZ.UTF-8" LANGUAGE="cs_CZ:cs:en_GB:en" /usr/share/setup-tool-backends/scripts/disks-conf --report
Sep  8 03:48:47 localhost su[4083]: + ??? root:rak
Sep  8 03:48:47 localhost su[4083]: (pam_unix) session opened for user rak by (uid=0)
Sep  8 03:48:56 localhost sudo:      rak : TTY=pts/1 ; PWD=/home/rak ; USER=root ; COMMAND=/bin/sh -c env LANG="cs_CZ.UTF-8" LANGUAGE="cs_CZ:cs:en_GB:en" /usr/share/setup-tool-backends/scripts/disks-conf --report
Sep  8 03:52:06 localhost su[4083]: (pam_unix) session closed for user rak
Sep  8 03:55:25 localhost gnome-screensaver-dialog: (pam_unix) authentication failure; logname= uid=1000 euid=1000 tty=:0.0 ruser= rhost=  user=rak
Sep  8 03:55:27 localhost gnome-screensaver-dialog: (pam_unix) authentication failure; logname= uid=1000 euid=1000 tty=:0.0 ruser= rhost=  user=root
Sep  8 03:58:10 localhost sudo: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=pts/2 ruser= rhost=  user=rak
Sep  8 03:58:19 localhost sudo:      rak : TTY=pts/2 ; PWD=/home/rak ; USER=root ; COMMAND=/sbin/halt
Sep  8 03:58:20 localhost gdm[3137]: (pam_unix) session closed for user rak
Sep  8 16:32:25 localhost gdm[3136]: (pam_unix) session opened for user root by (uid=0)
Sep  8 16:35:59 localhost gdm[3136]: (pam_unix) session closed for user root
Sep  8 16:38:47 localhost gdm[3188]: (pam_unix) session opened for user rak by (uid=0)
Sep  8 17:01:59 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/sbin/synaptic --hide-main-window --non-interactive --parent-window-id 48234508 --set-selections-file /tmp/tmppCzfc4
Sep  8 17:08:49 localhost gdm[3188]: (pam_unix) session closed for user rak
Sep  8 17:09:18 localhost gdm[4346]: (pam_unix) session opened for user root by (uid=0)
Sep  8 17:13:35 localhost gdm[4346]: (pam_unix) session closed for user root
Sep  8 17:52:02 localhost gdm[3170]: (pam_unix) session opened for user rak by (uid=0)
Sep  8 18:14:07 localhost gdm[3170]: (pam_unix) session closed for user rak
Sep  8 18:31:48 localhost gdm[3194]: (pam_unix) session opened for user rak by (uid=0)
Sep  8 19:08:02 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/disks-admin
Sep  8 19:08:04 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/bin/sh -c env LANG="cs_CZ.UTF-8" LANGUAGE="cs_CZ:cs:en_GB:en" /usr/share/setup-tool-backends/scripts/disks-conf --report
Sep  8 19:09:00 localhost su[5225]: + ??? root:rak
Sep  8 19:09:00 localhost su[5225]: (pam_unix) session opened for user rak by (uid=0)
Sep  8 19:09:02 localhost su[5225]: (pam_unix) session closed for user rak
Sep  8 19:09:32 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/disks-admin
Sep  8 19:09:34 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/bin/sh -c env LANG="cs_CZ.UTF-8" LANGUAGE="cs_CZ:cs:en_GB:en" /usr/share/setup-tool-backends/scripts/disks-conf --report
Sep  8 19:10:17 localhost su[5514]: + ??? root:rak
Sep  8 19:10:17 localhost su[5514]: (pam_unix) session opened for user rak by (uid=0)
Sep  8 19:10:18 localhost su[5514]: (pam_unix) session closed for user rak
Sep  8 19:11:55 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gdebi-gtk --non-interactive /home/rak/Desktop/Deb/alsa-base_1.0.13-5_all.deb
Sep  8 19:17:01 localhost CRON[5845]: (pam_unix) session opened for user root by (uid=0)
Sep  8 19:17:02 localhost CRON[5845]: (pam_unix) session closed for user root
Sep  8 19:30:47 localhost gdm[3194]: (pam_unix) session closed for user rak
Sep  8 20:10:47 localhost gdm[3213]: (pam_unix) session opened for user rak by (uid=0)
Sep  8 20:17:01 localhost CRON[3608]: (pam_unix) session opened for user root by (uid=0)
Sep  8 20:17:01 localhost CRON[3608]: (pam_unix) session closed for user root
Sep  8 21:17:01 localhost CRON[5713]: (pam_unix) session opened for user root by (uid=0)
Sep  8 21:17:01 localhost CRON[5713]: (pam_unix) session closed for user root
Sep  8 22:17:01 localhost CRON[7753]: (pam_unix) session opened for user root by (uid=0)
Sep  8 22:17:01 localhost CRON[7753]: (pam_unix) session closed for user root
Sep  8 23:17:01 localhost CRON[9921]: (pam_unix) session opened for user root by (uid=0)
Sep  8 23:17:01 localhost CRON[9921]: (pam_unix) session closed for user root
Sep  9 00:17:01 localhost CRON[12086]: (pam_unix) session opened for user root by (uid=0)
Sep  9 00:17:01 localhost CRON[12086]: (pam_unix) session closed for user root
Sep  9 00:45:16 localhost gdm[3213]: (pam_unix) session closed for user rak
Sep  9 00:57:53 localhost gdm[3207]: (pam_unix) session opened for user root by (uid=0)
Sep  9 01:05:27 localhost gdm[3207]: (pam_unix) session closed for user root
Sep  9 01:06:55 localhost gdm[3674]: (pam_unix) session opened for user rak by (uid=0)
Sep  9 01:07:44 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/sbin/gdmsetup
Sep  9 01:08:26 localhost gdm[3674]: (pam_unix) session closed for user rak
Sep  9 01:09:08 localhost gdm[3901]: (pam_unix) session opened for user rak by (uid=0)
Sep  9 01:17:01 localhost CRON[4327]: (pam_unix) session opened for user root by (uid=0)
Sep  9 01:17:01 localhost CRON[4327]: (pam_unix) session closed for user root
Sep  9 02:01:48 localhost gdm[3901]: (pam_unix) session closed for user rak
Sep  9 17:42:32 localhost gdm[3186]: (pam_unix) session opened for user rak by (uid=0)
Sep  9 17:45:56 localhost gdm[3186]: (pam_unix) session closed for user rak
Sep  9 17:46:22 localhost gdm[3523]: (pam_unix) session opened for user root by (uid=0)
Sep  9 17:50:37 localhost gdm[3523]: (pam_unix) session closed for user root
Sep  9 17:51:04 localhost gdm[3923]: (pam_unix) session opened for user rak by (uid=0)
Sep  9 17:54:44 localhost su[4245]: + pts/1 rak:root
Sep  9 17:54:44 localhost su[4245]: (pam_unix) session opened for user root by (uid=1000)
Sep  9 17:55:38 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/users-admin
Sep  9 17:55:40 localhost sudo:      rak : TTY=pts/2 ; PWD=/home/rak ; USER=root ; COMMAND=/bin/sh -c env LANG="cs_CZ.UTF-8" LANGUAGE="cs_CZ:cs:en_GB:en" /usr/share/setup-tool-backends/scripts/users-conf --report
Sep  9 17:57:10 localhost su[4245]: (pam_unix) session closed for user root
Sep  9 18:17:01 localhost CRON[5047]: (pam_unix) session opened for user root by (uid=0)
Sep  9 18:17:01 localhost CRON[5047]: (pam_unix) session closed for user root
Sep  9 19:17:01 localhost CRON[7077]: (pam_unix) session opened for user root by (uid=0)
Sep  9 19:17:01 localhost CRON[7077]: (pam_unix) session closed for user root
Sep  9 19:45:04 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gdebi-gtk --non-interactive /home/rak/Desktop/gcc-4.2-base_4.2.1-5_powerpc.deb
Sep  9 19:48:24 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gdebi-gtk --non-interactive /home/rak/Desktop/libc6_2.6.1-2_powerpc.deb
Sep  9 19:52:00 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gdebi-gtk --non-interactive /home/rak/Desktop/libgcc1_4.2.1-5_powerpc.deb
Sep  9 19:54:05 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gdebi-gtk --non-interactive /home/rak/Desktop/libstdc++6_4.2.1-5_powerpc.deb
Sep  9 19:58:01 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gdebi-gtk --non-interactive /home/rak/Desktop/simgear0_0.3.10-2_powerpc.deb
Sep  9 20:17:02 localhost CRON[9674]: (pam_unix) session opened for user root by (uid=0)
Sep  9 20:17:02 localhost CRON[9674]: (pam_unix) session closed for user root
Sep  9 20:34:59 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gdebi-gtk --non-interactive /home/rak/Desktop/fgfs-base_0.9.10-1_all.deb
Sep  9 20:45:39 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gdebi-gtk --non-interactive /home/rak/Desktop/flightgear_0.9.10-2_powerpc.deb
Sep  9 21:17:01 localhost CRON[11964]: (pam_unix) session opened for user root by (uid=0)
Sep  9 21:17:01 localhost CRON[11964]: (pam_unix) session closed for user root
Sep  9 21:21:39 localhost gdm[3923]: (pam_unix) session closed for user rak
Sep  9 21:22:03 localhost gdm[12204]: (pam_unix) session opened for user root by (uid=0)
Sep  9 21:25:10 localhost gdm[12204]: (pam_unix) session closed for user root
Sep  9 21:25:30 localhost gdm[12530]: (pam_unix) session opened for user rak by (uid=0)
Sep  9 22:02:49 localhost gdm[12530]: (pam_unix) session closed for user rak


« Poslední změna: 29 Října 2007, 17:17:54 od Anna Taliánová »

messner

  • Návštěvník
  • Příspěvků: 97
Re: virus?
« Odpověď #63 kdy: 28 Října 2007, 20:45:22 »
Sep 15 00:32:49 localhost gdm[3192]: (pam_unix) session opened for user rak by (uid=0)
Sep 15 00:33:28 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/update-manager
Sep 15 00:39:13 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/update-manager
Sep 15 00:43:03 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/update-manager
Sep 15 01:17:01 localhost CRON[5057]: (pam_unix) session opened for user root by (uid=0)
Sep 15 01:17:01 localhost CRON[5057]: (pam_unix) session closed for user root
Sep 15 02:09:51 localhost gdm[3192]: (pam_unix) session closed for user rak
Sep 15 14:41:02 localhost gdm[3189]: (pam_unix) session opened for user rak by (uid=0)
Sep 15 14:41:58 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gnome-language-selector
Sep 15 14:57:47 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gnome-language-selector
Sep 15 15:00:26 localhost gdm[3189]: (pam_unix) session closed for user rak
Sep 15 15:02:15 localhost gdm[3188]: (pam_unix) session opened for user rak by (uid=0)
Sep 15 15:03:24 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/sbin/gdmsetup
Sep 15 15:05:24 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gnome-language-selector
Sep 15 15:17:01 localhost CRON[3945]: (pam_unix) session opened for user root by (uid=0)
Sep 15 15:17:01 localhost CRON[3945]: (pam_unix) session closed for user root
Sep 15 16:14:18 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/apt-get install ubuntu-desktop
Sep 15 16:17:01 localhost CRON[7238]: (pam_unix) session opened for user root by (uid=0)
Sep 15 16:17:01 localhost CRON[7238]: (pam_unix) session closed for user root
Sep 15 16:31:14 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gdebi-gtk --non-interactive /home/rak/Desktop/alsa-tools_1.0.10-1ubuntu1_powerpc.deb
Sep 15 16:33:59 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gdebi-gtk --non-interactive /home/rak/Desktop/alsa-utils_1.0.10-1ubuntu14_powerpc.deb
Sep 15 16:35:58 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gdebi-gtk --non-interactive /home/rak/Desktop/linux-sound-base_1.0.10-4ubuntu4_all.deb
Sep 15 17:01:53 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gdebi-gtk --non-interactive /home/rak/Desktop/libflash0c2_0.4.13-9_powerpc.deb
Sep 15 17:02:55 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gdebi-gtk --non-interactive /home/rak/Desktop/libflash-swfplayer_0.4.13-9_powerpc.deb
Sep 15 17:17:01 localhost CRON[9675]: (pam_unix) session opened for user root by (uid=0)
Sep 15 17:17:02 localhost CRON[9675]: (pam_unix) session closed for user root
Sep 15 18:17:01 localhost CRON[11900]: (pam_unix) session opened for user root by (uid=0)
Sep 15 18:17:01 localhost CRON[11900]: (pam_unix) session closed for user root
Sep 15 18:46:50 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gdebi-gtk --non-interactive /home/rak/Desktop/fgfs-base_0.9.10-1_all.deb
Sep 15 19:17:01 localhost CRON[14655]: (pam_unix) session opened for user root by (uid=0)
Sep 15 19:17:01 localhost CRON[14655]: (pam_unix) session closed for user root
Sep 15 20:17:01 localhost CRON[17166]: (pam_unix) session opened for user root by (uid=0)
Sep 15 20:17:01 localhost CRON[17166]: (pam_unix) session closed for user root
Sep 15 21:17:01 localhost CRON[19168]: (pam_unix) session opened for user root by (uid=0)
Sep 15 21:17:01 localhost CRON[19168]: (pam_unix) session closed for user root
Sep 15 22:17:01 localhost CRON[21237]: (pam_unix) session opened for user root by (uid=0)
Sep 15 22:17:01 localhost CRON[21237]: (pam_unix) session closed for user root
Sep 15 22:51:54 localhost sudo:      rak : TTY=pts/2 ; PWD=/home/rak ; USER=root ; COMMAND=/bin/mkdir /media/windows
Sep 15 22:52:48 localhost sudo:      rak : TTY=pts/2 ; PWD=/home/rak ; USER=root ; COMMAND=/bin/chmod 777 -R /media/windows
Sep 15 23:17:01 localhost CRON[23431]: (pam_unix) session opened for user root by (uid=0)
Sep 15 23:17:01 localhost CRON[23431]: (pam_unix) session closed for user root
Sep 16 00:17:02 localhost CRON[25492]: (pam_unix) session opened for user root by (uid=0)
Sep 16 00:17:02 localhost CRON[25492]: (pam_unix) session closed for user root
Sep 16 00:42:28 localhost gdm[3188]: (pam_unix) session closed for user rak
Sep 16 01:23:04 localhost gdm[3191]: (pam_unix) session opened for user rak by (uid=0)
Sep 16 01:57:06 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/sbin/gdmsetup
Sep 16 01:59:10 localhost gdm[3191]: (pam_unix) session closed for user rak
Sep 16 17:16:06 localhost gdm[3188]: (pam_unix) session opened for user root by (uid=0)
Sep 16 17:17:01 localhost CRON[3402]: (pam_unix) session opened for user root by (uid=0)
Sep 16 17:17:01 localhost CRON[3402]: (pam_unix) session closed for user root
Sep 16 18:17:01 localhost CRON[21337]: (pam_unix) session opened for user root by (uid=0)
Sep 16 18:17:01 localhost CRON[21337]: (pam_unix) session closed for user root
Sep 16 18:58:21 localhost gdm[3188]: (pam_unix) session closed for user root
Sep 16 18:58:53 localhost gdm[22913]: (pam_unix) session opened for user rak by (uid=0)
Sep 16 19:16:14 localhost gdm[22913]: (pam_unix) session closed for user rak
Sep 16 19:35:04 localhost gdm[3195]: (pam_unix) session opened for user rak by (uid=0)
Sep 16 20:17:01 localhost CRON[4866]: (pam_unix) session opened for user root by (uid=0)
Sep 16 20:17:01 localhost CRON[4866]: (pam_unix) session closed for user root
Sep 16 20:18:27 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/disks-admin
Sep 16 20:18:29 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/bin/sh -c env LANG="cs_CZ.UTF-8" LANGUAGE="cs_CZ:cs:en_GB:en" /usr/share/setup-tool-backends/scripts/disks-conf --report
Sep 16 20:20:23 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/disks-admin
Sep 16 20:20:25 localhost sudo:      rak : TTY=pts/1 ; PWD=/home/rak ; USER=root ; COMMAND=/bin/sh -c env LANG="cs_CZ.UTF-8" LANGUAGE="cs_CZ:cs:en_GB:en" /usr/share/setup-tool-backends/scripts/disks-conf --report
Sep 16 20:24:13 localhost sudo:      rak : TTY=pts/2 ; PWD=/home/rak ; USER=root ; COMMAND=/bin/umount /dev/hdc
Sep 16 20:25:04 localhost sudo:      rak : TTY=pts/2 ; PWD=/home/rak ; USER=root ; COMMAND=/bin/mount /dev/hdc
Sep 16 21:17:01 localhost CRON[7715]: (pam_unix) session opened for user root by (uid=0)
Sep 16 21:17:01 localhost CRON[7715]: (pam_unix) session closed for user root
Sep 16 21:24:24 localhost sudo:      rak : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/time-admin
Sep 16 21:24:26 localhost sudo:      rak : TTY=pts/2 ; PWD=/ ; USER=root ; COMMAND=/bin/sh -c env LANG="cs_CZ.UTF-8" LANGUAGE="cs_CZ:cs:en_GB:en" /usr/share/setup-tool-backends/scripts/time-conf --report
Sep 16 19:34:35 localhost sudo:      rak : timestamp too far in the future: Sep 16 21:24:24 2007 ; TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gparted
Sep 16 19:35:11 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gparted
Sep 16 19:41:51 localhost gdm[3195]: (pam_unix) session closed for user rak
Sep 16 22:17:01 localhost CRON[3242]: (pam_unix) session opened for user root by (uid=0)
Sep 16 22:17:01 localhost CRON[3242]: (pam_unix) session closed for user root
Sep 16 23:17:01 localhost CRON[3244]: (pam_unix) session opened for user root by (uid=0)
Sep 16 23:17:01 localhost CRON[3244]: (pam_unix) session closed for user root
Sep 16 23:20:11 localhost gdm[3222]: (pam_unix) session opened for user rak by (uid=0)
Sep 16 23:24:20 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/bin/mount /dev/hdb11
Sep 16 23:24:38 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/bin/mount /dev/hdb11
Sep 16 23:24:58 localhost sudo:      rak : TTY=unknown ; PWD=/home/rak ; USER=root ; COMMAND=/usr/bin/gparted
Sep 16 23:26:06 localhost sudo:      rak : TTY=pts/0 ; PWD=/ ; USER=root ; COMMAND=/bin/mount /dev/hdb11
Sep 16 23:26:30 localhost sudo:      rak : TTY=pts/0 ; PWD=/ ; USER=root ; COMMAND=/bin/mount /dev/hdc
Sep 16 23:26:44 localhost sudo:      rak : TTY=pts/0 ; PWD=/ ; USER=root ; COMMAND=/bin/umount /dev/hdc
Sep 16 23:26:49 localhost sudo:      rak : TTY=pts/0 ; PWD=/ ; USER=root ; COMMAND=/bin/mount /dev/hdc
Sep 16 23:32:05 localhost sudo:      rak : TTY=pts/0 ; PWD=/ ; USER=root ; COMMAND=/bin/mount /dev/hdb8
Sep 16 23:35:00 localhost sudo:      rak : TTY=pts/0 ; PWD=/ ; USER=root ; COMMAND=/bin/mount /dev/hdb11
Sep 16 23:38:12 localhost gdm[3222]: (pam_unix) session closed for user rak


messner

  • Návštěvník
  • Příspěvků: 97
Re: virus?
« Odpověď #64 kdy: 28 Října 2007, 20:46:42 »
Sep 21 21:50:16 localhost gdm[2970]: (pam_unix) session opened for user rak by (uid=0)
Sep 21 22:17:01 localhost CRON[4309]: (pam_unix) session opened for user root by (uid=0)
Sep 21 22:17:01 localhost CRON[4309]: (pam_unix) session closed for user root
Sep 21 23:17:01 localhost CRON[6173]: (pam_unix) session opened for user root by (uid=0)
Sep 21 23:17:01 localhost CRON[6173]: (pam_unix) session closed for user root
Sep 22 00:06:26 localhost gdm[2970]: (pam_unix) session closed for user rak
Sep 22 00:08:57 localhost gdm[3211]: (pam_unix) session opened for user rak by (uid=0)
Sep 22 00:09:24 localhost gdm[3211]: (pam_unix) session closed for user rak
Sep 22 00:09:54 localhost gdm[3344]: (pam_unix) session opened for user rak by (uid=0)
Sep 22 00:10:17 localhost gdm[3344]: (pam_unix) session closed for user rak
Sep 22 00:10:29 localhost gdm[3344]: (pam_unix) session opened for user rak by (uid=0)
Sep 22 00:10:33 localhost gdm[3344]: (pam_unix) session closed for user rak
Sep 22 00:10:41 localhost gdm[3344]: (pam_unix) session opened for user root by (uid=0)
Sep 22 00:17:01 localhost CRON[3869]: (pam_unix) session opened for user root by (uid=0)
Sep 22 00:17:01 localhost CRON[3869]: (pam_unix) session closed for user root
Sep 22 00:17:09 localhost gdm[3344]: (pam_unix) session closed for user root
Sep 22 00:19:58 localhost gdm[3216]: (pam_unix) session opened for user rak by (uid=0)
Sep 22 00:20:23 localhost gdm[3216]: (pam_unix) session closed for user rak
Sep 22 00:20:52 localhost gdm[3340]: (pam_unix) session opened for user rak by (uid=0)
Sep 22 00:22:56 localhost gdm[3340]: (pam_unix) session closed for user rak
Sep 22 00:24:01 localhost gdm[3468]: (pam_unix) session opened for user rak by (uid=0)
Sep 22 00:24:18 localhost gdm[3468]: (pam_unix) session closed for user rak
Sep 22 00:24:55 localhost gdm[3593]: (pam_unix) session opened for user rak by (uid=0)
Sep 22 00:25:13 localhost gdm[3593]: (pam_unix) session closed for user rak
Sep 22 00:25:51 localhost gdm[3682]: (pam_unix) session opened for user rak by (uid=0)
Sep 22 00:26:05 localhost gdm[3682]: (pam_unix) session closed for user rak
Sep 22 00:26:40 localhost gdm[3816]: (pam_unix) session opened for user rak by (uid=0)
Sep 22 00:28:35 localhost sudo:      rak : TTY=pts/0 ; PWD=/home/rak ; USER=root ; COMMAND=/sbin/halt
Sep 22 00:28:37 localhost gdm[3816]: (pam_unix) session closed for user rak
Sep 22 00:33:17 localhost gdm[3212]: (pam_unix) session opened for user rak by (uid=0)
Sep 22 00:33:43 localhost gdm[3212]: (pam_unix) session closed for user rak
Sep 22 00:34:14 localhost gdm[3337]: (pam_unix) session opened for user rak by (uid=0)
Sep 22 00:34:20 localhost gdm[3337]: (pam_unix) session closed for user rak
Sep 22 00:34:46 localhost gdm[3465]: (pam_unix) session opened for user root by (uid=0)
Sep 22 01:17:01 localhost CRON[5251]: (pam_unix) session opened for user root by (uid=0)
Sep 22 01:17:01 localhost CRON[5251]: (pam_unix) session closed for user root
Sep 22 02:17:02 localhost CRON[7612]: (pam_unix) session opened for user root by (uid=0)
Sep 22 02:17:03 localhost CRON[7612]: (pam_unix) session closed for user root
Sep 22 02:20:40 localhost gdm[3465]: (pam_unix) session closed for user root
Sep 22 11:06:01 kopkopr gdm[3479]: (pam_unix) session opened for user rak by (uid=0)
Sep 22 11:06:16 kopkopr gdm[3479]: (pam_unix) session closed for user rak
Sep 22 20:48:24 kopkopr gdm[3491]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost=  user=rak
Sep 22 20:48:40 kopkopr gdm[3491]: (pam_unix) session opened for user rak by (uid=0)
Sep 22 20:50:27 kopkopr gdm[3491]: (pam_unix) session closed for user rak
Sep 22 20:51:08 kopkopr gdm[3619]: (pam_unix) session opened for user rak by (uid=0)
Sep 22 20:51:26 kopkopr gdm[3619]: (pam_unix) session closed for user rak
Sep 22 20:52:02 kopkopr gdm[3748]: (pam_unix) session opened for user rak by (uid=0)
Sep 22 20:52:32 kopkopr gdm[3748]: (pam_unix) session closed for user rak
Sep 22 20:53:32 kopkopr gdm[3882]: (pam_unix) session opened for user rak by (uid=0)
Sep 22 20:53:52 kopkopr gdm[3882]: (pam_unix) session closed for user rak
Sep 22 20:54:21 kopkopr gdm[4006]: (pam_unix) session opened for user root by (uid=0)
Sep 22 21:17:01 kopkopr CRON[4985]: (pam_unix) session opened for user root by (uid=0)
Sep 22 21:17:01 kopkopr CRON[4985]: (pam_unix) session closed for user root
Sep 22 22:17:01 kopkopr CRON[6976]: (pam_unix) session opened for user root by (uid=0)
Sep 22 22:17:01 kopkopr CRON[6976]: (pam_unix) session closed for user root
Sep 22 23:17:04 kopkopr CRON[9990]: (pam_unix) session opened for user root by (uid=0)
Sep 22 23:17:06 kopkopr CRON[9990]: (pam_unix) session closed for user root
Sep 23 00:17:02 kopkopr CRON[12574]: (pam_unix) session opened for user root by (uid=0)
Sep 23 00:17:04 kopkopr CRON[12574]: (pam_unix) session closed for user root
Sep 23 00:20:19 kopkopr gdm[4006]: (pam_unix) session closed for user root
Sep 23 11:30:42 kopkopr gdm[3493]: (pam_unix) session opened for user root by (uid=0)
Sep 23 12:17:01 kopkopr CRON[5596]: (pam_unix) session opened for user root by (uid=0)
Sep 23 12:17:01 kopkopr CRON[5596]: (pam_unix) session closed for user root
Sep 23 13:17:02 kopkopr CRON[7860]: (pam_unix) session opened for user root by (uid=0)
Sep 23 13:17:02 kopkopr CRON[7860]: (pam_unix) session closed for user root
Sep 23 14:17:01 kopkopr CRON[9752]: (pam_unix) session opened for user root by (uid=0)
Sep 23 14:17:01 kopkopr CRON[9752]: (pam_unix) session closed for user root
Sep 23 15:17:01 kopkopr CRON[11860]: (pam_unix) session opened for user root by (uid=0)
Sep 23 15:17:01 kopkopr CRON[11860]: (pam_unix) session closed for user root
Sep 23 16:17:01 kopkopr CRON[13972]: (pam_unix) session opened for user root by (uid=0)
Sep 23 16:17:01 kopkopr CRON[13972]: (pam_unix) session closed for user root
Sep 23 17:17:01 kopkopr CRON[16074]: (pam_unix) session opened for user root by (uid=0)
Sep 23 17:17:01 kopkopr CRON[16074]: (pam_unix) session closed for user root
Sep 23 18:17:01 kopkopr CRON[18955]: (pam_unix) session opened for user root by (uid=0)
Sep 23 18:17:02 kopkopr CRON[18955]: (pam_unix) session closed for user root
Sep 23 19:17:01 kopkopr CRON[21203]: (pam_unix) session opened for user root by (uid=0)
Sep 23 19:17:01 kopkopr CRON[21203]: (pam_unix) session closed for user root
Sep 23 19:37:51 kopkopr useradd[21955]: new group: name=rak1, GID=1001
Sep 23 19:37:51 kopkopr useradd[21955]: new user: name=rak1, UID=1001, GID=1001, home=/home/rak1, shell=/bin/sh
Sep 23 19:38:32 kopkopr passwd[21971]: (pam_unix) password changed for rak1
Sep 23 19:38:32 kopkopr passwd[21971]: (pam_unix) Password for rak1 was changed
Sep 27 21:02:21 kopkopr gdm[3213]: (pam_unix) session opened for user rak by (uid=0)
Sep 27 21:02:53 kopkopr gdm[3213]: (pam_unix) session closed for user rak
Sep 27 21:03:18 kopkopr gdm[3526]: (pam_unix) authentication failure; loSep 28 10:22:04 kopkopr gdm[3494]: (pam_unix) session opened for user root by (uid=0)
Sep 28 11:17:01 kopkopr CRON[5401]: (pam_unix) session opened for user root by (uid=0)
Sep 28 11:17:03 kopkopr CRON[5401]: (pam_unix) session closed for user root
Sep 28 12:17:02 kopkopr CRON[7441]: (pam_unix) session opened for user root by (uid=0)
Sep 28 12:17:03 kopkopr CRON[7441]: (pam_unix) session closed for user root
Sep 28 13:17:02 kopkopr CRON[9226]: (pam_unix) session opened for user root by (uid=0)
Sep 28 13:17:02 kopkopr CRON[9226]: (pam_unix) session closed for user root
Sep 28 14:17:02 kopkopr CRON[11260]: (pam_unix) session opened for user root by (uid=0)
Sep 28 14:17:02 kopkopr CRON[11260]: (pam_unix) session closed for user root
Sep 28 15:17:01 kopkopr CRON[13166]: (pam_unix) session opened for user root by (uid=0)
Sep 28 15:17:02 kopkopr CRON[13166]: (pam_unix) session closed for user root
Sep 28 16:17:01 kopkopr CRON[15250]: (pam_unix) session opened for user root by (uid=0)
Sep 28 16:17:01 kopkopr CRON[15250]: (pam_unix) session closed for user root
Sep 28 17:17:01 kopkopr CRON[17365]: (pam_unix) session opened for user root by (uid=0)
Sep 28 17:17:01 kopkopr CRON[17365]: (pam_unix) session closed for user root
Sep 28 18:17:01 kopkopr CRON[19449]: (pam_unix) session opened for user root by (uid=0)
Sep 28 18:17:01 kopkopr CRON[19449]: (pam_unix) session closed for user root
Sep 28 19:17:01 kopkopr CRON[21639]: (pam_unix) session opened for user root by (uid=0)
Sep 28 19:17:01 kopkopr CRON[21639]: (pam_unix) session closed for user root
Sep 28 20:17:01 kopkopr CRON[23911]: (pam_unix) session opened for user root by (uid=0)
Sep 28 20:17:02 kopkopr CRON[23911]: (pam_unix) session closed for user root
Sep 28 21:17:01 kopkopr CRON[25901]: (pam_unix) session opened for user root by (uid=0)
Sep 28 21:17:01 kopkopr CRON[25901]: (pam_unix) session closed for user root
Sep 28 22:17:01 kopkopr CRON[27909]: (pam_unix) session opened for user root by (uid=0)
Sep 28 22:17:01 kopkopr CRON[27909]: (pam_unix) session closed for user root
Sep 28 22:50:36 kopkopr gdm[3494]: (pam_unix) session closed for user root
Sep 28 22:51:19 kopkopr gdm[29158]: (pam_unix) session opened for user rak2 by (uid=0)
Sep 28 22:52:02 kopkopr gdm[29158]: (pam_unix) session closed for user rak2
Sep 28 22:52:16 kopkopr gdm[29158]: (pam_unix) session opened for user root by (uid=0)
Sep 28 22:54:00 kopkopr gdm[29158]: (pam_unix) session closed for user root
Sep 28 22:54:32 kopkopr gdm[29446]: (pam_unix) session opened for user rak1 by (uid=0)
Sep 28 23:11:21 kopkopr gdm[29446]: (pam_unix) session closed for user rak1
Sep 28 23:11:52 kopkopr gdm[29574]: (pam_unix) session opened for user rak2 by (uid=0)
Sep 28 23:12:29 kopkopr gdm[29574]: (pam_unix) session closed for user rak2
Sep 28 23:12:59 kopkopr gdm[29698]: (pam_unix) session opened for user root by (uid=0)
Sep 28 23:17:01 kopkopr CRON[30023]: (pam_unix) session opened for user root by (uid=0)
Sep 28 23:17:01 kopkopr CRON[30023]: (pam_unix) session closed for user root
Sep 28 23:55:41 kopkopr gdm[29698]: (pam_unix) session closed for user root
Sep 28 23:56:07 kopkopr gdm[31255]: (pam_unix) session opened for user rak by (uid=0)
Sep 28 23:56:51 kopkopr gdm[31255]: (pam_unix) session closed for user rak
Sep 28 23:57:23 kopkopr gdm[31381]: (pam_unix) session opened for user rak1 by (uid=0)
Sep 28 23:57:54 kopkopr gdm[31381]: (pam_unix) session closed for user rak1
Sep 28 23:58:23 kopkopr gdm[31509]: (pam_unix) session opened for user root by (uid=0)
Sep 29 00:08:01 kopkopr gdm[31509]: (pam_unix) session closed for user root
Sep 29 20:53:57 kopkopr gdm[3497]: (pam_unix) session opened for user rak by (uid=0)
Sep 29 20:54:07 kopkopr gdm[3497]: (pam_unix) session closed for user rak
Sep 29 20:54:36 kopkopr gdm[3621]: (pam_unix) session opened for user rak1 by (uid=0)
Sep 29 20:54:43 kopkopr gdm[3621]: (pam_unix) session closed for user rak1
Sep 29 20:55:16 kopkopr gdm[3749]: (pam_unix) session opened for user root by (uid=0)
Sep 29 21:04:58 kopkopr gdm[3749]: (pam_unix) session closed for user root
Sep 29 22:43:17 kopkopr gdm[3509]: (pam_unix) session opened for user root by (uid=0)
Sep 29 23:17:01 kopkopr CRON[4868]: (pam_unix) session opened for user root by (uid=0)
Sep 29 23:17:01 kopkopr CRON[4868]: (pam_unix) session closed for user root
Sep 30 00:17:01 kopkopr CRON[7491]: (pam_unix) session opened for user root by (uid=0)
Sep 30 00:17:02 kopkopr CRON[7491]: (pam_unix) session closed for user root
Sep 30 00:20:22 kopkopr gdm[3509]: (pam_unix) session closed for user root
Sep 30 17:13:38 kopkopr gdm[3460]: (pam_unix) session opened for user root by (uid=0)
Sep 30 17:17:01 kopkopr CRON[3771]: (pam_unix) session opened for user root by (uid=0)
Sep 30 17:17:01 kopkopr CRON[3771]: (pam_unix) session closed for user root
Sep 30 17:52:08 kopkopr gdm[3460]: (pam_unix) session closed for user root

Pavelp

  • Host
Re: virus?
« Odpověď #65 kdy: 28 Října 2007, 20:55:08 »
Co jsme Vam udelali, ze nas mucite ?

nettezzaumana

  • Host
Re: virus?
« Odpověď #66 kdy: 28 Října 2007, 21:00:46 »
Co jsme Vam udelali, ze nas mucite ?
;D -- jj, co jsme provedli?

anicka

  • Host
Re: virus?
« Odpověď #67 kdy: 29 Října 2007, 17:19:37 »
Když do terminálu zadáte příkaz
Kód: [Vybrat]
historyuvidíte historii Vašich shellových příkazů. Více třeba zde.
« Poslední změna: 29 Října 2007, 17:22:54 od Anna Taliánová »

messner

  • Návštěvník
  • Příspěvků: 97
Re: virus?
« Odpověď #68 kdy: 02 Listopadu 2007, 22:16:50 »
To je prave to, co nelze provest. Po restartu pocitace se mi uz nepodarilo prihlasit na svuj ucet, objevilo se neco v tom smyslu, ze posledni sezeni trvalo nekolik vterin a objevilo se znovu prihlasovaci okno. Mohl jsem se prihlasit pouze jako root. Proto jsem nemohl pouzit prikaz history.

Ale slo mi hlavne o to, do ktereho souboru se ta historie uklada, z neceho to ten prikaz zjistit prece musi. To je posledni informace, ktera me zajima, pak uz dam pokoj.
« Poslední změna: 16 Listopadu 2007, 00:56:56 od Anna Taliánová »

 

Provoz zaštiťuje spolek OpenAlt.