Well I just shot off a quickie to Mike. If he is running Red
Hat 7 he has had a visitor. The /etc/cron.daily/0anacron
should read anacron -u cron.daily. Looks suspicious.
Mel
--
--
This Mail composed using Netscap
I would say that you box has been hacked. Most likely with
a variation of the l10n (lion) worm. I would pull it
off the network and run a rootkit scan on it.
Check out http://www.sans.org/ for info. Look at the
Alerts and Analysis section.
The script that is running looks like it is "cleaning u
Is this a virus?
Is this `below' the correct anacron file.
Help???
Thanks
miket
I am experiencing some troble with or list server. It is rebooting every five minutes
or so. I have tracked it down to the anacron service and /etc/cron.daily/0anacron
#!/bin/sh
if [ -f /sbin/reboot ]; then
mv /