URGENT: Rootkit on Ubuntu 10.04?!?

Question

I'm running Ubuntu 10.04, I believe it's Lucid Lynx or some-such. Anyhow, I had downloaded a small program that I thought was for a chat, but it didn't work. Now I'm getting banned on most websites I go on for spamming, and I read up about it; - It seems that I have a rootkit!

I'm currently running a thorough Avast! scan, but I don't think that it will work for rootkits. What do I do? Please, please help me! It's been logging everything I do, and all my accounts on...Well, basically everything are locking up!

Thank you!! Thank you. I'm a Linux newbie, so I don't know much. I also can't get the Terminal to work, it says that I'm not an Administrator, and then asks if I'm root, but I can't activate any commands. Please recommend any decent programs!

Thank you!!

Answer 1

How did you install it? Was it a .deb or did you compile it?



.exe is for Windows, they don't work on Linux, unless you are running something like WINE and even then WINE doesn't allow start-ups. This means that even if you infect WINE the virus only works when you launch it, otherwise it just lays dormant and does no harm.



You are probably just being paranoid. Relax and check your System Monitor to see what applications are running.

Answer 2

Unfortunately, you may have to wipe the disk by reinstalling. It's the surest and easiest way to get rid of it. Copy important files from your home folder first, but make sure you don't copy any malware such as login scripts for example. I'd probably copy individual files if possible, but it probably didn't "infect" things that bad.



Also, change all your computer and website passwords after you reinstall.

Answer 3

This video may help: http://www.youtube.com/watch?v=MY7IZYsqqbI



It shows how to get rid of rootkits.



Also, this one may be of use: http://www.youtube.com/watch?v=ASab8qcUizY