Folder - Denied access ?

[Qbito]

Hello Guys.

I have folder on file server. Looks like right belongs to root. But when I'm logged in as root I'm getting access denied (perrmisions) when I'm trying open. But I can open this folder when I'm logged in as user. I know it look bit mixed up but maybe ypu have any idea how to get out from this mess. many thanks

[bigtomrodney]

When you are logged in as root, run the following commands

echo $UID
ls -l <folder>

Post back the output.

[Qbito]

echo $UID gave 0 and ls -l <folder> gave /bin/ls: /<folder> Perrmission denied. The other thing which is strange. All other folders belongs to group Root but this particular one for some reson belongs to DEAMON. Maybe that is the problem. There is no login for DEAMON

[bigtomrodney]

By the looks of that I'd say you've been rooted. Shutdown, get off the network and run from a livedisc. Try to run a rootkit check from the livedisc and see how you're getting on.

Have a look at this tool - chkrootkit -- locally checks for signs of a rootkit

[Qbito]

Do you think is virus issue

[bigtomrodney]

No not a virus, as I said it sounds like symptoms of a rootkit. I would go about checking your system with the tool I linked to as soon as possible.

[secondmouse]

What's the result of (run as root) the following command?

ls -ld the_folder_in_question

if it looks something like

d-******** ... the_folder_in_question

(The immediate dash after the letter d means the owner of the folder has no permission to list (dir) the folder)

then change the folder permission:

chmod u+r the_folder_in_question

now see if you can list it

ls -l the_folder_in_question