corsasport.co.uk
 

Corsa Sport » Message Board » Off Day » Geek Day » Help Need ASAP


New Topic

New Poll
  Subscribe | Add to Favourites

You are not logged in and may not post or reply to messages. Please log in or create a new account or mail us about fixing an existing one - register@corsasport.co.uk

There are also many more features available when you are logged in such as private messages, buddy list, location services, post search and more.


Author Help Need ASAP
Jodi_the_g
Member

Registered: 7th Aug 01
Location: Washington D.C
User status: Offline
2nd May 06 at 12:01   View User's Profile U2U Member Reply With Quote

I am in puTTY and ssh to my server to delete a file called

shh-scan

i have found it in the /var/tmp/.. /fuckers/ssh-scan.

but can not delete it anyway to get the full path so i can delete this file.
abdus
Member

Registered: 23rd Feb 06
User status: Offline
2nd May 06 at 12:05   View User's Profile U2U Member Reply With Quote

which os?

this might help:

http://www.spywaredb.com/remove-shadow-security-scanner/

]

[Edited on 02-05-2006 by abdus]
Jodi_the_g
Member

Registered: 7th Aug 01
Location: Washington D.C
User status: Offline
2nd May 06 at 12:05   View User's Profile U2U Member Reply With Quote

debain i think
Tim
Site Administrator

Avatar

Registered: 21st Apr 00
User status: Offline
2nd May 06 at 12:23   View Garage View User's Profile U2U Member Reply With Quote

I'd be more worried about how it got there to be honest. Sounds like someone's exploited one of your services.

To delete just enclose the path in single-quotes so the shell will interpret it as a single path (and not multiple because of the spaces).

i.e. rm '/var/tmp/.. /fuckers/ssh-scan'
Jodi_the_g
Member

Registered: 7th Aug 01
Location: Washington D.C
User status: Offline
2nd May 06 at 12:26   View User's Profile U2U Member Reply With Quote

i know how it got there and closed that loop hole
Pop
Member

Registered: 8th May 03
Location: Reading
User status: Offline
2nd May 06 at 14:44   View User's Profile U2U Member Reply With Quote

my god all i did was innocently opened this thread for a read and entered a world in which people are talking a crazy new language that i have no idea what it means
Sam
Moderator
Premium Member


Registered: 24th Dec 99
Location: West Midlands
User status: Offline
2nd May 06 at 16:01   View User's Profile U2U Member Reply With Quote

SSH and TTY can both EMA and GTF, but they must STFU first.
Jodi_the_g
Member

Registered: 7th Aug 01
Location: Washington D.C
User status: Offline
2nd May 06 at 22:29   View User's Profile U2U Member Reply With Quote

thanks tim and willy helped alot.

Any ideas what ssh-scan does.

got in though a contact php file so have removed it and looking for a better option.
Ian
Site Administrator

Avatar

Registered: 28th Aug 99
Location: Liverpool
User status: Online
3rd May 06 at 00:18   View Garage View User's Profile U2U Member Reply With Quote

At a guess, listens for stuff over SSH.

 
New Topic

New Poll

  Related Threads Author Forum Replies Views Last Post
rite need a gsi spoiler asap leecorsa18 Classifieds 3 1364
10th Sep 03 at 21:48
by demon_corsa
 
urgently wanted: morrettes, mfd&passenger crash bar RichR Wanted 2 1374
9th Jan 04 at 22:25
by J4LDO
 
gsi skirts needed asap!!! jamesvalver Parts Offered 0 754
29th Mar 05 at 22:20
by jamesnova
 
WIRING LOOM.. FROM SPORT, GSI ASAP !! MR2Mike Wanted 0 763
13th May 05 at 12:11
by Mike_Corsa
 
*** WANTED ASAP *** Drivers Side Tensioner Dom Wanted 0 690
15th Jul 05 at 09:33
by Dom
 

Corsa Sport » Message Board » Off Day » Geek Day » Help Need ASAP 29 database queries in 0.0108571 seconds