corsasport.co.uk
  Not logged in [Login - Register]  
You Are Not Registered Or Not Logged In  

Corsa Sport » Message Board » Off Day » Geek Day » Help Need ASAP » Post Reply

Post Reply
Who Can Post? All users can post new topics and all users can reply.
Icon:
Formatting Mode:
Normal
Advanced
Help
Insert Bold text Insert Italicized text Insert Underlined text Insert Centered text Insert a Hyperlink Insert Email Hyperlink Insert an Image Insert Code Formatted text Insert Quoted text
Message:
HTML is Off
Smilies are On
BB Code is On
[img] Code is On
Post Options: Disable smileys?
Turn BBCode off?
Receive email notification of new replies?

Ian

 posted on 3rd May 06 at 00:18

At a guess, listens for stuff over SSH.


Jodi_the_g

 posted on 2nd May 06 at 22:29

thanks tim and willy helped alot.

Any ideas what ssh-scan does.

got in though a contact php file so have removed it and looking for a better option.


Sam

 posted on 2nd May 06 at 16:01

SSH and TTY can both EMA and GTF, but they must STFU first.


Pop

 posted on 2nd May 06 at 14:44

my god all i did was innocently opened this thread for a read and entered a world in which people are talking a crazy new language that i have no idea what it means :lol:


Jodi_the_g

 posted on 2nd May 06 at 12:26

i know how it got there and closed that loop hole


Tim

 posted on 2nd May 06 at 12:23

I'd be more worried about how it got there to be honest. Sounds like someone's exploited one of your services.

To delete just enclose the path in single-quotes so the shell will interpret it as a single path (and not multiple because of the spaces).

i.e. rm '/var/tmp/.. /fuckers/ssh-scan'


Jodi_the_g

 posted on 2nd May 06 at 12:05

debain i think


abdus

 posted on 2nd May 06 at 12:05

which os?

this might help:

http://www.spywaredb.com/remove-shadow-security-scanner/

]

[Edited on 02-05-2006 by abdus]


Jodi_the_g

 posted on 2nd May 06 at 12:01

I am in puTTY and ssh to my server to delete a file called

shh-scan

i have found it in the /var/tmp/.. /fuckers/ssh-scan.

but can not delete it anyway to get the full path so i can delete this file.