On Mar 1, 2008, at 11:35 , Jeffrey Altman wrote:

Steve Devine wrote:
http://www.msu.edu/~elizald2/viagra/order-viagra-overnight- delivery.html I have disabled it but you get the idea,. This dir is chock-o- block full
of crap.
I believe this is the work of a bot that arrives initially to the the
user via a spam email.

If you are interested in knowing where the files are coming from turn
on audit logs on the file servers.  That will erase all doubts.

But lets make something absolutely clear.  If you have volumes that
permit system:anyuser to write to it, there does not have to be any
spam involved. Any machine with any AFS client anywhere in the world can write to the volume. There is no need to send spam.

That said, this is probably not specific to AFS; I would suspect a garden-variety virus/worm that propagates itself via SMB shares.

--
brandon s. allbery [solaris,freebsd,perl,pugs,haskell] [EMAIL PROTECTED]
system administrator [openafs,heimdal,too many hats] [EMAIL PROTECTED]
electrical and computer engineering, carnegie mellon university    KF8NH


_______________________________________________
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Reply via email to