run strings on it.. Does it say anything interesting?
> I checked Symantec's and McAfee's virus site for the file and turned up
> empty. It's not a virus or an abortive attempt at one. And a search of
> www.securityfocus.com came up empty. If you are running squid, it came up in
> a recent Linux Advisory Watch(7/29/01). If you search for squid on
> securityfocus, it comes up. Now to figure out how it got there.
>
> Jim
>
> On Wednesday August 01, 2001 4:20 am, Mike Andrew wrote:
> > On Wednesday 01 August 2001 17:30, Jay Nugent wrote:
> > > Take a look at 'man chattr'. You may find that the append-only bit is
> > > set in the file attributes. A common trick by crackers to keep files
> > > from being moved/renamed (mv) or removed (rm), even by root! But you
> > > should be able to set the attributes back to normal with chattr and then
> > > be able to delete the file :-)
> >
> > every once in a while, I get a total gem from you lot. That's a keeper.
>
> --
>
> 5:42am up 8 days, 6:16, 2 users, load average: 0.68, 0.50, 0.31
> ------------------------------------------------------------------------
> Running Caldera eD2.4 - Linux - because life is too short for reboots...
>
> _________________________________________________________
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com
>
> _______________________________________________
> http://linux.nf -- [EMAIL PROTECTED]
> Archives, Subscribe, Unsubscribe, Digest, Etc
>->http://linux.nf/mailman/listinfo/linux-users
--
6:25am up 1 day, 18:41, 2 users, load average: 1.00, 1.00, 1.00
UNIX...because life is too short for reboots...
_______________________________________________
http://linux.nf -- [EMAIL PROTECTED]
Archives, Subscribe, Unsubscribe, Digest, Etc
->http://linux.nf/mailman/listinfo/linux-users
