Portal Home > Knowledgebase > Articles Database > lfd on xyz.example.net : Suspicious File Alert
lfd on xyz.example.net : Suspicious File Alert
| Posted by crazyaboutlinux, 05-24-2010, 01:15 AM |
| Today, We have received more than 200 emails regarding " lfd on xyz.example.net : Suspicious File Alert"
Guy's Please , let me know what can i do & how to verify that this process is still running or not
|
| Posted by nessic, 05-24-2010, 02:42 AM |
| You can check to see if the process is running by using the "ps". You should remember to read the instructions of use first.
Have you taken any other security actions to stop this kind of suspicious behaviour?
|
| Posted by PremiumHost, 05-24-2010, 03:46 AM |
| Check files hosted by user chiprese
Most likely the user runs some shell script.
|
| Posted by bear, 05-24-2010, 09:07 AM |
| Chances are it's this: http://www.psybnc.at/
IRC script. As mentioned, however, I'd be concerned they were able to do more than just this and would be looking into this box more closely.
|
Add to Favourites 
Print this Article
Also Read
