On Sun, 23 Feb 2003, Mike Vanecek wrote: > lsattr is not installed on my system. >[...] > > chattr not installed on my system either. If it was, I do not know the syntax > to override the long name with !! at the beginning.
Install the e2fsprogs RPM. Use backslashes to escape the ! and blanks in the file name. > > As to the how, you have been hacked. There are lots of threads in this > > list on what to do. to secure your box. > > > > See the archives at > > > > http://marc.theaimsgroup.com/?l=redhat-list > > Searched and found nothing relating to this problem. Searched on what? Try just "hacked". You're not especially concerned about how it happened, just what to do now. > Also looked at the proftpd home page with no results. > > The file contains: > > [quote] > I get lots of uploads and I always appreciate it so please don't think I'm > complaining but, > > I have an index file in this dir, it can also be found at: > www.ae.utexas.edu/~johnv/mp3 > > Please make use of this, load it, hit ctrl+f and search for what you're > looking for, it's much quicker for you. >[...] > [/quote off] Looks like something from somebody's MP3 fileshare host? > My transfer log shows: > > Sat Feb 22 18:55:42 2003 0 pc-80-193-233-222-en.blueyonder.co.uk 1269 > /var/ftp/incoming/!!_Just_a_Comment_that_you_may_want_to_READ.txt a _ i a > [EMAIL PROTECTED] ftp 0 * c > > Can anyone give me a bit more to go with? Here's where the proftp site might be of help: interpreting log messages. -- Matthew Saltzman Clemson University Math Sciences [EMAIL PROTECTED] http://www.math.clemson.edu/~mjs -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
