On Mon, Jan 9, 2012 at 5:20 PM, Luisa Ester Navarro
wrote:
>
>
>
>
> I didn´t have any cronjobs but when I detected the attack I saw one in
> /var/spool/cron
> My logifle says
> User apache:
>
> /var/tmp/.autorun/update >/dev/null 2>&1: 2162 Time(s)
>
>
I didn´t have any cronjobs but when I detected the attack I saw one in
/var/spool/cron
My logifle says
User apache: /var/tmp/.autorun/update >/dev/null 2>&1: 2162 Time(s)
personal crontab deleted: 56 Time(s) personal crontab listed: 1 Time(s)
personal crontab
