Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 17 Oct 2007 16:15:27 -0400
From:      "Josh Carroll" <josh.carroll@gmail.com>
To:        "Jack Raats" <jack@jarasoft.net>
Cc:        Jerry McAllister <jerrymc@msu.edu>, freebsd-questions@freebsd.org
Subject:   Re: Strange perl script
Message-ID:  <8cb6106e0710171315ue106605k55770e63d89294ea@mail.gmail.com>
In-Reply-To: <002101c810f9$10379b80$0202fea9@jarasoft.net>
References:  <005801c8107c$8b7b93a0$0202fea9@jarasoft.net> <20071017151607.GB51123@gizmo.acns.msu.edu> <002101c810f9$10379b80$0202fea9@jarasoft.net>

next in thread | previous in thread | raw e-mail | index | archive | help
> The stangest thing is that I cann't find sploger on  my system. After a
> reboot sploger doesn't appear anymore, which makes it more stranger.

So you have done a:

find / -name sploger -type f

And nothing comes up? If that's the case, it sounds like it was a perl
script that was run, then subsequently removed from the file system.
Which sounds rather nefarious to me. You might want to check for
rootkits, etc.

Josh



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8cb6106e0710171315ue106605k55770e63d89294ea>