Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 Apr 2003 23:02:35 +0100
From:      Ceri Davies <setantae@submonkey.net>
To:        Kent Stewart <kstewart@owt.com>
Cc:        questions@freebsd.org
Subject:   Re: readonly.exe ?
Message-ID:  <20030423220235.GA11362@submonkey.net>
In-Reply-To: <200304231128.38949.kstewart@owt.com>
References:  <20030423181930.GA9237@submonkey.net> <200304231128.38949.kstewart@owt.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Apr 23, 2003 at 11:28:38AM -0700, Kent Stewart wrote:
> On Wednesday 23 April 2003 11:19 am, Ceri Davies wrote:
> > Does anyone have any idea what readonly.exe is ?
> >
> > shrike.private.submonkey.net kernel log messages:
> > > pid 74935 (readonly.exe), uid 0: exited on signal 10 (core dumped)
> > > pid 76059 (readonly.exe), uid 0: exited on signal 10 (core dumped)
> >
> > As far as I can see it doesn't exist on that system, but I'm slightly
> > concerned... (no, there's no core dump either).
> 
> If you run locate, I would try "locate '*.core'" and see who the core 
> belongs to. I would tend to suspect that someone opened an email with 
> an attachment that would do nasty things to a Windows system.

No core file, as I mentioned above, and the uid concerned was 0 (aka root),
otherwise I wouldn't have worried, but the attachment thing was a good idea
otherwise.

Thanks,

Ceri
-- 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030423220235.GA11362>