eliminate a hacker user account that has taken over root

Asked by mike schaut

I switched to ubuntu because i was hacked in windows. Now the same thing has happened to my ubuntu OS. I am not a software expert and having difficulty understanding the programming language. machine language good, programming language bad. I have found that the mount point was / in the first partition of the d drive. If I could get detailed help unmounting this %$@!$#% from that point, I would be forever gratefull. Launchpad has been used, I can't list the programs that are installed, have been used, and how much modification has been to my pc.
I only worked on installing ubuntu for a couple days, very slow, programming language, remember. it's like a chinese person speaking english. also, how do I stop this from happening again????? Please throw life preserver!!
Thank you very much, Mike

Question information

English Edit question
Ubuntu mountall Edit question
No assignee Edit question
Last query:
Last reply:
Revision history for this message
actionparsnip (andrew-woodhead666) said :

DId you by any chance enable your root account?

Revision history for this message
Arnaudus (a-lerouzic) said :

As far as I understand, there is no problem. It is perfectly normal that / is mounted. You cannot unmount it, it contains the system. You have not been hacked.

Revision history for this message
Eliah Kagan (degeneracypressure) said :

Yes, / is always mounted, and that's not a problem. If your system told you that / was *not* mounted, *that* would be a problem (though it would still not be an indication of a "hacker" attack.)

I'm not sure why you think your system has been compromised, but perhaps you are confused about the different meanings of the term "root."


"Rooting" is also sometimes used in slang to mean "to compromise the security of someone else's computer and obtain absolute control of it." (In this sense, "to root," means, "to become root," or, "to gain root privileges.")

/ is the root directory, and by definition the mount mount of the root filesystem (i.e. the root filesystem is whatever volume is mounted with / as its mount point). This should not be confused with other meanings of the term "root," nor should / be confused with /root (these are two separate directories that serve completely different purposes and are not at all interchangeable).

Revision history for this message
Eliah Kagan (degeneracypressure) said :

Correction: "/ is the root directory, and by definition the mount POINT of the root filesystem"

Can you help with this problem?

Provide an answer of your own, or ask mike schaut for more information if necessary.

To post a message you must log in.