On Sat, Oct 18, 2008, Semih Gokalp wrote: > > Hi all,I have problem on CentOS 5.2 > while everything is working great,suddenly i have this error when i > login my server, This could well mean that your system has been cracked. These programs are frequently changed in common root exploits. You can run ``rpm -V packagename'' to check for package corruption: The command ``rpm -qf /bin/egrep'' will show the package name to which /bin/egrep belongs. A lazy way to handle this is: rpm -V `rpm -qf /bin/egrep` rpm -V `rpm -qf /bin/hostname` The most common reason these programs don't run after a root exploit is that the cracker has replaced them with binaries from another distribution and the binaries are looking for shared libraries that are not on the cracked system. Bill -- INTERNET: bill at celestial.com Bill Campbell; Celestial Software LLC URL: http://www.celestial.com/ PO Box 820; 6641 E. Mercer Way Voice: (206) 236-1676 Mercer Island, WA 98040-0820 Fax: (206) 232-9186 "I do not feel obliged to believe that the same God who has endowed us with sense, reason, and intellect has intended us to forego their use." -- Galileo Galilei