RE: [cobalt-users] Hacked RaQ3 won't let root do things (Permission denied)

["GPS" <gps@xxxxxxxxxxxxxx>]

+I have a RaQ3 that's been hacked, but I thought I sorted that out. 
+chkrootkit says there are no vulnerabilites left.
+
+The problem is this:  About half an hour after the server is rebooted,
+errors start to happen.  Web pages don't display (admserv or normal), and
+logged in as root, trying to do things at the command line gives lots of
+'Permission denied' errors.  eg.
+
+[blah]# ls -l
+ls: filename: Permission denied
+ls: othefile: Permission denied
+
Did you run the UK Raq3 unhack script?
Did you check checksums for ls and other system files? 
Best bet is to do a full restore.