Re: hacked?

From: David Kirchner (davidk@accretivetg.com)
Date: 09/26/01 

Date: Wed, 26 Sep 2001 09:49:45 -0700 (PDT)
From: David Kirchner <davidk@accretivetg.com>
To: Tom Beer <tom@analogon.com>

On Wed, 26 Sep 2001, Tom Beer wrote:

> Hi,
>
> I just have taken a look at my /stand directory
> and have absolutely no explanation what the -sh and the [
> file could be, and why are nearly all files have exact the same
> size, date and time.
>
> Any suggestions will be very welcome,
> thanks Tom

This is normal stuff. /stand is basically the programs used for
installation. If you run ls -il in there you'll see that the inodes are
the same for most of those files. They were created using something called
"crunch" (I forget the actual command).

- dpk

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message