From owner-freebsd-questions Wed Jul 24 16:42: 1 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1359F37B400 for ; Wed, 24 Jul 2002 16:41:53 -0700 (PDT) Received: from labs.unixhideout.com (dsl-65-187-193-189.telocity.com [65.187.193.189]) by mx1.FreeBSD.org (Postfix) with ESMTP id 030F643E42 for ; Wed, 24 Jul 2002 16:41:52 -0700 (PDT) (envelope-from sagacious@unixhideout.com) Received: from MIKESBOX ([192.168.1.10]) by labs.unixhideout.com (8.12.5/8.12.3) with ESMTP id g6ONfrX2068481 for ; Wed, 24 Jul 2002 19:41:53 -0400 (EDT) (envelope-from sagacious@unixhideout.com) From: "sagacious" To: Subject: heh Date: Wed, 24 Jul 2002 19:41:50 -0400 Message-ID: <000601c2336b$aea3e8d0$0a01a8c0@MIKESBOX> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0007_01C2334A.279248D0" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.2627 Importance: Normal X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG This is a multi-part message in MIME format. ------=_NextPart_000_0007_01C2334A.279248D0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit There is a file in my website root called ?* I knew I didn't make the file so I made a test directory called foo went into it and touched some quick files and directories. I typed rm ?* and sure as I thought it deleted all the test files. Someone really has it out for me lately. I think my box has been compromised and im not sure where to start. They got in via that god damn sshd exploit so I closed the port in my router. How do I remove this file without messing up my box. sagacious (Mike) Network administrator The unixhideout network http://www.unixhideout.com ------=_NextPart_000_0007_01C2334A.279248D0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

There is a file in my website root called = ?*

 

I = knew I didn’t make the file so I made a test directory called foo went into it and touched some quick files and directories. I typed rm = ?* and sure as I thought it deleted all the test files. Someone really has it = out for me lately. I think my box has been compromised and im not sure where to start. They got in via that god damn sshd exploit so I closed the port in my router. How do I remove this file = without messing up my box.

 

sagacious (Mike)

Network administrator

The unixhideout network

http://www.unixhideout.com=

 

------=_NextPart_000_0007_01C2334A.279248D0-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message