-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 06/22/08 12:07, Joey Hess wrote: > H.S. wrote: >> Hello, >> >> I was cleaning up some directories in an acquaintance's machine running >> Ubuntu Linux (whenever needed, I SSH to his machine from my Debian >> Lenny) and noticed that one of the directories had a file called "ik" >> which had this in it: >> --------------------------------------------- >> $ cat ik >> user un22 uyxuyx >> binary >> get postal.exe >> bye >> --------------------------------------------- >> >> >> Any idea what this is? From google, it appears it may be a spyware attempt. > > It appears to be a script of commands that could be sent to a ftp client > to log into a ftp server and download a file. > > postal.exe certianly seems unsavory on google. No idea how it could do > anything on linux though.
But why would it be *on* a Linux box? Has he been infected with a worm or rootkit? - -- Ron Johnson, Jr. Jefferson LA USA "Kittens give Morbo gas. In lighter news, the city of New New York is doomed." -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkhei9AACgkQS9HxQb37Xmc92wCgx2c0294iB8c6GLbVs+MjmQvp SIEAoIbddbVZwvZ5U6dYgPXTxU3A6l6f =hQLk -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
