That was already done earlier in the thread iirc, with a file and then a directory as arguments. As its already been done I guess this is just poking the corpse :)

On 27 Dec 2012 18:49, "Hugo Mills" <hugo-bf@carfax.org.uk> wrote:
On Thu, Dec 27, 2012 at 06:42:46PM +0000, Hamish Gough wrote:
> Did you try a strace? That would show a bit more of what its doing

   You want to *run* this dodgy-looking binary?!

   Hugo.

> On 27 Dec 2012 17:44, "Ian" <ian@lovingboth.com> wrote:
>
> > At this point, I would be renaming it, removing its execute permission,
> > and replacing it with a new 'd' that emails you when it runs, who called it
> > and with what command line.
> >
> > Ian
> > On Dec 27, 2012 5:14 PM, "G. Miliotis" <corfiot@elementality.org> wrote:
> >
> >> Try "strings d"
> >> Sometimes things... appear.
> >>
> >> --GM
> >>
> >> ______________________________**_________________
> >> users mailing list
> >> users@lists.bitfolk.com
> >> https://lists.bitfolk.com/**mailman/listinfo/users<https://lists.bitfolk.com/mailman/listinfo/users>
> >>
> >
> > _______________________________________________
> > users mailing list
> > users@lists.bitfolk.com
> > https://lists.bitfolk.com/mailman/listinfo/users
> >
> >

> _______________________________________________
> users mailing list
> users@lists.bitfolk.com
> https://lists.bitfolk.com/mailman/listinfo/users


--
=== Hugo Mills: hugo@... carfax.org.uk | darksatanic.net | lug.org.uk ===
  PGP key: 515C238D from wwwkeys.eu.pgp.net or http://www.carfax.org.uk
       --- A cross? Oy vey, have you picked the wrong vampire! ---