Re: files in /var/tmp

2007-04-24 Thread Michelle Konzack
Am 2007-04-16 10:45:24, schrieb Daniel B.: > Why would you need to erase the disk like that? Because the D-I create only new blocks and some special designed viruses may find there Data via a block count? And yes, we have tried soch things and it works! Under Linux as under Windows So you need a

Re: files in /var/tmp

2007-04-16 Thread John Hasler
Doug writes: > Why risk it? There is no risk. A reinstall suffices. -- John Hasler -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: files in /var/tmp

2007-04-16 Thread Douglas Allan Tutty
On Mon, Apr 16, 2007 at 10:45:24AM -0400, Daniel B. wrote: > Andrew M.A. Cater wrote: > >On Sun, Apr 08, 2007 at 03:44:33PM -0700, Kamaraju Kusumanchi wrote: > ... > >>My system (Debian Etch) has been recently compromised and I deleted most > >>of the suspicious files. However I am not sure about

Re: files in /var/tmp

2007-04-16 Thread Daniel B.
Andrew M.A. Cater wrote: On Sun, Apr 08, 2007 at 03:44:33PM -0700, Kamaraju Kusumanchi wrote: ... My system (Debian Etch) has been recently compromised and I deleted most of the suspicious files. However I am not sure about these. Is it safe to delete them or do you think some process expects

Re: files in /var/tmp

2007-04-09 Thread Kevin Mark
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, Apr 08, 2007 at 03:44:33PM -0700, Kamaraju Kusumanchi wrote: > Hi all > > Can someone throw some light on as to what does /var/tmp/fast-mech.tgz and > /var/tmp/raw directories do? > > My system (Debian Etch) has been recently compromised and

Re: files in /var/tmp

2007-04-08 Thread John Hasler
Kamaraju Kusumanchi wrote: > My system (Debian Etch) has been recently compromised and I deleted > most of the suspicious files. How do you know which files are suspicious? How do you know that the login binary has not been replaced with one with a backdoor? -- John Hasler -- To UNSUBSCRIBE,

Re: files in /var/tmp

2007-04-08 Thread Douglas Allan Tutty
On Sun, Apr 08, 2007 at 03:44:33PM -0700, Kamaraju Kusumanchi wrote: > Hi all > > Can someone throw some light on as to what does /var/tmp/fast-mech.tgz > and /var/tmp/raw directories do? > > My system (Debian Etch) has been recently compromised and I deleted > most of the suspicious files. Howev

Re: files in /var/tmp

2007-04-08 Thread Andrew M.A. Cater
On Sun, Apr 08, 2007 at 03:44:33PM -0700, Kamaraju Kusumanchi wrote: > Hi all > > Can someone throw some light on as to what does /var/tmp/fast-mech.tgz and > /var/tmp/raw directories do? > > My system (Debian Etch) has been recently compromised and I deleted most of > the suspicious files. How