eliminate a hacker user account that has taken over root

Asked by mike schaut on 2011-04-10

I switched to ubuntu because i was hacked in windows. Now the same thing has happened to my ubuntu OS. I am not a software expert and having difficulty understanding the programming language. machine language good, programming language bad. I have found that the mount point was / in the first partition of the d drive. If I could get detailed help unmounting this %$@!$#% from that point, I would be forever gratefull. Launchpad has been used, I can't list the programs that are installed, have been used, and how much modification has been to my pc.
I only worked on installing ubuntu for a couple days, very slow, programming language, remember. it's like a chinese person speaking english. also, how do I stop this from happening again????? Please throw life preserver!!
Thank you very much, Mike

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu mountall Edit question
Assignee:
No assignee Edit question
Last query:
2011-04-10
Last reply:
2011-04-11

DId you by any chance enable your root account?

Arnaudus (a-lerouzic) said : #2

As far as I understand, there is no problem. It is perfectly normal that / is mounted. You cannot unmount it, it contains the system. You have not been hacked.

Yes, / is always mounted, and that's not a problem. If your system told you that / was *not* mounted, *that* would be a problem (though it would still not be an indication of a "hacker" attack.)

I'm not sure why you think your system has been compromised, but perhaps you are confused about the different meanings of the term "root."

http://en.wikipedia.org/wiki/Root_directory
http://en.wikipedia.org/wiki/Root_user
http://en.wikipedia.org/wiki/Rooting_(Android_OS)
http://en.wikipedia.org/wiki/Rootkit

"Rooting" is also sometimes used in slang to mean "to compromise the security of someone else's computer and obtain absolute control of it." (In this sense, "to root," means, "to become root," or, "to gain root privileges.")

/ is the root directory, and by definition the mount mount of the root filesystem (i.e. the root filesystem is whatever volume is mounted with / as its mount point). This should not be confused with other meanings of the term "root," nor should / be confused with /root (these are two separate directories that serve completely different purposes and are not at all interchangeable).

Correction: "/ is the root directory, and by definition the mount POINT of the root filesystem"

Can you help with this problem?

Provide an answer of your own, or ask mike schaut for more information if necessary.

To post a message you must log in.