some unknown scripts

Net Llama! netllama
Mon May 17 12:01:42 PDT 2004


On 04/26/04 15:48, Swapana Ghosh wrote:
> Hi 
> 
>      Our server is
> Redhat8.0...Today i noticed.. few files/scripts under the following
> directory.. Below i mentioned the path, please check under 'pwd'.
> There is an executable "xinetd" is there and i found it is running 
> in our server.. 
> 
>     Do you think our server has been compromised ?  I was checking

If you can't figure out how files got on your server, then you've been 
compromised.  The files' contents are irrelevant.


-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
L. Friedman                       	       netllama at linux-sxs.org
Linux Step-by-step & TyGeMo: 		    http://netllama.ipfox.com

  16:05:01  up 141 days, 19:38,  1 user,  load average: 0.08, 0.11, 0.14



More information about the Linux-users mailing list