Date: Fri, 26 Jun 2009 16:39:04 -0600 From: "Rodrigo Ordonez Licona" <rodrigo (at mark) xnet.com.mx> Subject: [coba-e:15743] Re: /bin directory restore? To: <coba-e (at mark) bluequartz.org> Message-Id: <200906262239.n5QMcxX3007465 (at mark) ana.xnet.com.mx> In-Reply-To: <WC20090626193118.0800B0 (at mark) yourside.nl> X-Mail-Count: 15743Been there.... awfull as hell Try installing and yumming a machine locally then creating a tarball of the /bin directory, the result might become a frankenstein and might / might not work.... We did that just to make some time to migrate the users and sites to a healthy server. Mail me directly if you want a tarball with all these files HTH Rodrigo O This is what I see at /bin [admin@ bin]$ ls arch dmesg gzip mktemp rpm tracepath6 awk dnsdomainname hostname more rvi traceroute badsh doexec igawk mount rview traceroute6 basename domainname ipcalc mt sed true bash dumpkeys kbd_mode mv setfont umount cat echo kill netstat setserial uname chgrp egrep ksh nice sh unicode_start chmod env link nisdomainname sleep unicode_stop chown ex ln pgawk sort unlink cp false loadkeys ping stty usersh cpio fgrep login ping6 su usleep cut gawk ls ps sync vi date grep mail pwd tar view dd gtar mkdir rm touch ypdomainname df gunzip mknod rmdir tracepath zcat _____ From: Harm van Houten | YourSide [mailto:harm.van.houten (at mark) boschtion.nl] Sent: Viernes, 26 de Junio de 2009 01:31 To: coba-e Subject: [coba-e:15742] /bin directory restore? Importance: High Does any one have a idea on a way to restore the /bin directory? A system got hacked and the /bin directory was f***d up.... Met Vriendelijke Groet HMG van Houten YourSide Broadcast Assistance 24x7 Support: 0900 4440913 (70c/p) www.yourside.nl ******************************** YourSide Quality Broadcast & Support Vinkenveld 5 5249 JN, Rosmalen info (at mark) yourside.nl ******************************** ===================================================================== This e-mail message and it's attachments are subject to the disclaimer published at the following location: http://www.boschtion.nl/disclaimer Nieuws over de regio? dat tref je op http://www.boschtion.nl15743_2.html (attatchment)(tag is disabled)