A suspicious file has appeared on my Ubuntu linux box. It is in a strage place for a file that is written to - /usr/include/openssl/aes1.h. It contains plain text information that shouldn't be kept.
I have looked diligently to find where it is coming from without finding anything. It is definitely connected in some way to ssh (which I have removed and reinstalled to no effect.) If the file is not world writable ssh crashes after connecting and logging in to the remote end. It doesn't mind the read permissions being removed. Does anyone recognize the malware or configuration that this belongs to. Any help would be appreciated. /dan -- Dan Schlitt [email protected] _______________________________________________ Tech mailing list [email protected] https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech This list provided by the League of Professional System Administrators http://lopsa.org/
