Yea...did it logged on directly as root.  I think what happened is
someone hacked the box via anon. FTP and made this program as a back
door of some kind. :-/  I was able to 'chmod +w "   " ' it, no errors
there...but it yells when I try to rm it.

--Brian McCann

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of paul
Sent: Sunday, October 13, 2002 12:00 PM
To: [EMAIL PROTECTED]
Subject: Re: Slightly OT: How to remove an odd file...


Brian McCann wrote:
> No go...here's the listing for the file...here's what happens...
> 
> -rwsr-sr-x    1 root     root        64924 Sep  2 15:24
> 
> rm "   "
> rm: remove write-protected file `   '? y
> rm: cannot unlink `   ': Operation not permitted
> 
> Any other ideas?
> 

I assume you did this as root/sudo? Strange that it's setuid . . . .

-- 
Paul Beard / 8040 27th Ave NE / Seattle WA 98115 /
paulbeard [at] mac [ dot] com / 206 529 8400

weblog @ <http://paulbeard.no-ip.org/movabletype/>

With a rubber duck, one's never alone.
                -- "The Hitchhiker's Guide to the Galaxy"


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message

Reply via email to