Re: [bitfolk] Mystery executable "d"

Top Page

Reply to this message
Author: Jamie Stallwood
Date: 2012-12-27 10:44 -000
To: users
Subject: Re: [bitfolk] Mystery executable "d"
Thanks for the replies. It's not recognised by the virus sites mentioned by
James and rpm says that it doesn't belong to a package.

I think I was messing about with Amanda (oo-er) around that time but it
doesn't seem to relate to that either...

Cheers
Jamie Stallwood

-----Original Message-----
From: users-bounces+vps-bitfolk=project76.net@???
[mailto:users-bounces+vps-bitfolk=project76.net@lists.bitfolk.com] On Behalf
Of Brad Ackerman
Sent: 27 December 2012 07:20
To: users@???
Subject: Re: [bitfolk] Mystery executable "d"

Does rpm -qf /bin/d provide any output? If not, that would be... a rather
suspicious location for a file, given its location.

On Wed, Dec 26, 2012, at 0:17, Jamie Stallwood wrote:
> Hi all,
>
> Any idea what this entry on my Centos EL5XEN virtual machine might be,
> in /bin?
>
> -rwxr-xr-x 1 root  root     5488 May 12  2008 d

>
> No man page, no useful info from "strings", no --help option and
> nothing from yum whatprovides. It's newer than "ed" (and / itself) but
> older than "grep". The only thing I note is from hex dump:
>
> 0000960: 0047 4343 3a20 2847 4e55 2920 342e 312e .GCC: (GNU) 4.1.
> 0000970: 3220 3230 3038 3037 3034 2028 5265 6420 2 20080704 (Red
> 0000980: 4861 7420 342e 312e 322d 3530 2900 0047 Hat 4.1.2-50)..G
>
> If you put a directory as an argument it loops forever. If you put a
> file it spouts gibberish.
>
> Cheers!
> Jamie Stallwood
>
>
>
> _______________________________________________
> users mailing list
> users@???
> https://lists.bitfolk.com/mailman/listinfo/users



-- 
Brad Ackerman N1MNB                PGP: 0x9F49A373
brad@???   <*>   http://bsa.smugmug.com/


_______________________________________________
users mailing list
users@???
https://lists.bitfolk.com/mailman/listinfo/users