Re: [Mailman-Users] What is ADORE

2001-04-23 Thread Mel
Well I just shot off a quickie to Mike. If he is running Red Hat 7 he has had a visitor. The /etc/cron.daily/0anacron should read anacron -u cron.daily. Looks suspicious. Mel -- -- This Mail composed using Netscap

Re: [Mailman-Users] What is ADORE

2001-04-23 Thread Steve Pirk
I would say that you box has been hacked. Most likely with a variation of the l10n (lion) worm. I would pull it off the network and run a rootkit scan on it. Check out http://www.sans.org/ for info. Look at the Alerts and Analysis section. The script that is running looks like it is "cleaning u

[Mailman-Users] What is ADORE

2001-04-23 Thread MikeT
Is this a virus? Is this `below' the correct anacron file. Help??? Thanks miket I am experiencing some troble with or list server. It is rebooting every five minutes or so. I have tracked it down to the anacron service and /etc/cron.daily/0anacron #!/bin/sh if [ -f /sbin/reboot ]; then mv /