On Tue, Aug 07, 2001 at 08:29:39PM +0100, P Kirk wrote: > Saw something similiar in a FreeBSD box once. It was a trojan ftp > daemon that started off some obscure user like sysgetty or some other > "official" looking name. The RAID had 36 gigs of mp3s and porn. > > You might want to backup your data and reinstall if no-one has a more > knowledgable answer. > > In the meantime there's no need to disconnect from the net. Just have a > rolling kill command that kills ftpd every second. I don't have shell > skills yet but in dos it would be 2 files killa.bat and killb.bat > > killa.bat says killall ftpd and call killb.bat and killb does the same > in reverse. > > I know someone must have a neat shell script that does this? while true; do killall ftpd sleep 1 done -- Nathan Norman - Staff Engineer | A good plan today is better Micromuse Ltd. | than a perfect plan tomorrow. mailto:nnorman@micromuse.com | -- Patton
Attachment:
pgpnNqW0WFl9A.pgp
Description: PGP signature