On Sat, 2006-03-25 at 18:03 +0000, Mick wrote: > Hi All, > > I don't know what to make of the attached. I found it in my distfiles. I > can't think how I could have saved anything like that in there myself. As > far as I know portage would not save anything like that there (no package > that I know of). What else could it be? > > Has this box been compromised? > -- > Regards, > Mick Hi, Check the time of creation and if there're more files with nearly equal time/date. Check against time/date of merged packages (genlop --help). Scan with 'rkhunter & chkrootkit' preferably from a LiveCD. PS: there's a very little probability for an existence of some typo in some ebuild which could fetch this file from another URL. Or the worst scenario - some Gentoo mirror might have being compromised. No more ideas for the time being. Backup your data first. HTH.Rumen
smime.p7s
Description: S/MIME cryptographic signature
