From owner-freebsd-questions  Thu Nov 15  0:48:28 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from obsecurity.dyndns.org (adsl-63-207-60-80.dsl.lsan03.pacbell.net [63.207.60.80])
	by hub.freebsd.org (Postfix) with ESMTP id 762C237B417
	for <freebsd-questions@FreeBSD.ORG>; Thu, 15 Nov 2001 00:48:26 -0800 (PST)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 1C60066D0C; Thu, 15 Nov 2001 00:48:26 -0800 (PST)
Date: Thu, 15 Nov 2001 00:48:26 -0800
From: Kris Kennaway <kris@obsecurity.org>
To: "P. U. (Uli) Kruppa" <root@pukruppa.de>
Cc: "freebsd-questions@FreeBSD.ORG" <freebsd-questions@FreeBSD.ORG>
Subject: Re: Cracked? - Strange directory in /
Message-ID: <20011115004825.A61164@xor.obsecurity.org>
References: <20011115041805.Q2433-100000@big>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="qMm9M+Fa2AknHoGS"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20011115041805.Q2433-100000@big>; from root@pukruppa.de on Thu, Nov 15, 2001 at 04:25:43AM +0000
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


--qMm9M+Fa2AknHoGS
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Nov 15, 2001 at 04:25:43AM +0000, P. U. (Uli) Kruppa wrote:
>=20
> Hi,
>=20
> today I found a directory called something
> like
> /@???""?'??...????"""""??...
> on my gateway.
> Who or what might have produced this?

You can get stuff like this if you try and untar a file which isn't
actually a tarball.

Kris

--qMm9M+Fa2AknHoGS
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE784FZWry0BWjoQKURAiYHAJ9WrhVK6HmkA/xMAyEM4Zf4BVJ/UwCg5/L7
Jgpu0t6y7zFevYd5pHsuHqA=
=qo5D
-----END PGP SIGNATURE-----

--qMm9M+Fa2AknHoGS--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message