Bring your Pi up in 'single user mode' (look up 'single user mode' for the Pi operating system that you are using) so that you can look at the files without it being overwhelmed with more issues, you won't have networking enabled.
Which directories on the Pi are getting filled up?
'du' is the command to use.
Start with:
du -sk /* | sort in
and then look at the largest directory (will be at the end) using the same command, so that if /var is biggest:
cd var
du -sk * | sort -n
and keep going, looking at the biggest directory until the numbers get smaller.
One possibility is /var/log, if this is the biggest, look into the biggest file that you find. I will probably be over-full of messages talking about a particular problem.
I've cleaned up after root attacks - it means *STARTING FROM SCRATCH* - really, you absolutely must do this! and make sure to lock down your system with the latest updates before connecting it to the Internet again. I used a clean, separate computer to download what I needed.
And then, understanding that this might not be enough. 'Zero day' attacks (and others that the OS distributor has not yet patched for) can get you. 'Welcome' to the Internet! Sigh. Hopefully you won't run into this.
Unfortunately, this is 'life in the Internet fast lane'. Fortunately, you aren't a real target for most 'zero day' attacks, you're more likely to get hit by people who assume that sending you a .zip file will get you to open it and compromise your system. Never, ever open a .zip file, even if you think you know who it's from. If it's from a friend, get them to send it with a different name (something like myfile.thisisnottheZipfileyouarelookingfor) - but get them to tell you the name! - and then make sure that it is run through your virus scanner!
If you would like more computer security/virus tips I'm happy to help. This has become such a pain for everyone on the 'net!
- Richard
On 6/20/15 6:03 PM, Jerry Kutche wrote:
Today's power outage seems to have left my net 44 link DOA... If so I wanted everyone to know I may be back.. No time to fix right now.. Just spent over a week getting everything working after a virus attack. And was not really done still had two systems down.. Now I have this.. I need a break, also.. May pick this back up in July... May not.
Anyone linked to me I will be back eventually.. Maybe Maybe not.
But now I have to figure out a few things.
Why does my Pi lose all its free space within 30 minutes of boot up. Went from 73% to 100% cannot connect to it without rebooting over and over...
So until I feel like being a slave to linux and the PI I am off line.
73 Jerry N9LYA
44Net mailing list 44Net@hamradio.ucsd.edu http://hamradio.ucsd.edu/mailman/listinfo/44net