[linux-help] Re: deleting hidden directory and files

[Bruce Bales <bbales@xxxxxxxxxxx>]

Yes, you've been hacked - like me. The securing and optimizing linux book
specifically mentions use  by hackers of files or directories with names like 
"..
" which are hard to find.
See the url below.
bruce


http://www.linuxdoc.org/LDP/solrhe/Securing-Optimizing-Linux-RH-Edition-v1.3/chap5sec62.html

j m wagle wrote:

> I guess I've been 'hacked'.  Now I need help deleting some peculiar looking
> files.  I am no linux expert.  I have found and deleted some but the following
> is a problem.  I have found a directory with the following 'name'  (please 
> note
> I have included the parenthesis but every character, space is part of the 
> name)
>
> "/usr/man/man1/..  /.dir"
>
> this 'directory contains the following files:
> /usr/man/man1/..  /.dir/snif
> /usr/man/man1/..  /.dir/klog
> /usr/man/man1/..  /.dir/crush
> /usr/man/man1/..  /.dir/create
> /usr/man/man1/..  /.dir/s
> /usr/man/man1/..  /.dir/w
> /usr/man/man1/..  /.dir/log
> /usr/man/man1/..  /.dir/sc
> /usr/man/man1/..  /.dir/sc/ben
> /usr/man/man1/..  /.dir/sc/ben.c
> /usr/man/man1/..  /.dir/sc/core
> /usr/man/man1/..  /.dir/sc/osscan
> /usr/man/man1/..  /.dir/sc/pscan.c
> /usr/man/man1/..  /.dir/sc/scan
> /usr/man/man1/..  /.dir/sc/wus
> /usr/man/man1/..  /.dir/chipsul
>
> Please note: I DO NOT wish to delete my entire /usr/man/man1 directory (I hope
> you understand why).
>
> thanks in advance,
> mike wagle,
> wichita, ks
>
> -- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
> visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi

-- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi