Re: [OT]: possible spyware?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 06/22/08 12:07, Joey Hess wrote:
> H.S. wrote:
>> Hello,
>>
>> I was cleaning up some directories in an acquaintance's machine running
>> Ubuntu Linux (whenever needed, I SSH to his machine from my Debian
>> Lenny) and noticed that one of the directories had a file called "ik"
>> which had this in it:
>> ---------------------------------------------
>> $ cat ik
>> user un22 uyxuyx
>> binary
>> get postal.exe
>> bye
>> ---------------------------------------------
>>
>>
>> Any idea what this is? From google, it appears it may be a spyware attempt.
>
> It appears to be a script of commands that could be sent to a ftp client
> to log into a ftp server and download a file.
>
> postal.exe certianly seems unsavory on google. No idea how it could do
> anything on linux though.
But why would it be *on* a Linux box? Has he been infected with a
worm or rootkit?
- --
Ron Johnson, Jr.
Jefferson LA USA
"Kittens give Morbo gas. In lighter news, the city of New New
York is doomed."
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkhei9AACgkQS9HxQb37Xmc92wCgx2c0294iB8c6GLbVs+MjmQvp
SIEAoIbddbVZwvZ5U6dYgPXTxU3A6l6f
=hQLk
-----END PGP SIGNATURE-----
Reply to: