Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Cannot shutdown the system anymore!
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Gentoo on AMD64
View previous topic :: View next topic  
Author Message
danielr
n00b
n00b


Joined: 13 Dec 2005
Posts: 18

PostPosted: Wed Apr 05, 2006 4:43 am    Post subject: Cannot shutdown the system anymore! Reply with quote

Hi,

I've run Gentoo linux for the amd64 platform for some months now.
It went without problems (well, minor ones), until now.
When I boot Gentoo the last message which gets printed on the
screen is

Code:

Unknown HZ value! (somevalue) Assume somevalue.


Where somevalue is an integer.

The next strange thing is, when I try to reboot or shutdown the
system, I the following error

Code:

RK_Init: idt=0x80312d00, FUCK: IDT table read failed (offset 0x80312d00)


I'm running Gentoo 2.6.15.

My Gentoo system is not usable anymore,
so I welcome any suggestion helping me to solve the issue.

Thanks,
Daniel[/quote]
Back to top
View user's profile Send private message
asiB4
Guru
Guru


Joined: 16 Jan 2006
Posts: 370
Location: Inside the electric circus

PostPosted: Wed Apr 05, 2006 5:26 am    Post subject: Reply with quote

8O

google that RK_Init: idt=0x80312d00, FUCK: IDT table read failed (offset 0x80312d00)
error....can't say for sure..but from the reading I have done...prolly should disconnect from internet, isolate from network toss in a livecd and run chkrootkit, rkhunter, and check your logs...
_________________
Registered Linux User #332738

Back to top
View user's profile Send private message
GetCool
Guru
Guru


Joined: 23 Nov 2003
Posts: 324
Location: Madison, Wisconsin

PostPosted: Wed Apr 05, 2006 5:59 am    Post subject: Reply with quote

asiB4 wrote:
error....can't say for sure..but from the reading I have done...prolly should disconnect from internet, isolate from network toss in a livecd and run chkrootkit, rkhunter, and check your logs...


Seconded.

This appears to be a rootkit called "Suckit"...

http://la-samhna.de/library/rootkits/list.html
http://www.soohrt.org/stuff/linux/suckit/
http://www.derkeiler.com/Mailing-Lists/securityfocus/incidents/2003-10/0072.html

Check out the Phrack article where it was published...

http://www.phrack.org/phrack/58/p58-0x07

If you manage to fix your system without a reinstall, make sure to harden your system!
Back to top
View user's profile Send private message
danielr
n00b
n00b


Joined: 13 Dec 2005
Posts: 18

PostPosted: Wed Apr 05, 2006 9:50 am    Post subject: Reply with quote

First of all, thanks for your replies.

Ok, I will check for the rootkit.

And next time I will add some more security... I thought I don't need it for a single workstation, but I've been proven wrong.
Back to top
View user's profile Send private message
asiB4
Guru
Guru


Joined: 16 Jan 2006
Posts: 370
Location: Inside the electric circus

PostPosted: Wed Apr 05, 2006 10:03 am    Post subject: Reply with quote

danielr wrote:
First of all, thanks for your replies.

Ok, I will check for the rootkit.

And next time I will add some more security... I thought I don't need it for a single workstation, but I've been proven wrong.


http://www.gentoo.org/doc/en/security/security-handbook.xml

that should help out.... :D
_________________
Registered Linux User #332738

Back to top
View user's profile Send private message
barthi
Apprentice
Apprentice


Joined: 02 Mar 2003
Posts: 256

PostPosted: Sat Feb 17, 2007 11:21 am    Post subject: Reply with quote

Hi!

I have the same problem!
Is it secure, to backup my data over smb? Or is the rootkit also a risk for Windows??
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Gentoo on AMD64 All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum