Skip to main content
12 events
when toggle format what by license comment
Jun 11, 2011 at 22:39 vote accept mrbrdo
Jun 3, 2011 at 14:44 comment added PeterMmm What is about a file "touch system; ls system" you get some output ?
Jun 3, 2011 at 12:59 comment added user732 I encountered a rootkit (tragedy/dor) on a Solaris box 10 years ago. It did a similar thing with any file name ending in '0'. ls failed to show the file or directory, but shell globbing and open(2) or fopen(3) worked find.
Jun 3, 2011 at 12:51 answer added l0b0 timeline score: 1
Jun 3, 2011 at 12:37 history migrated from stackoverflow.com (revisions)
Jun 3, 2011 at 12:16 comment added Omnifarious @Heandel: Or run a binary named something other than md5sum off of a USB stick, just in case md5sum has been fiddled too.
Jun 3, 2011 at 8:17 comment added Heandel You should md5sum /bin/ls and check it against another CentOS 5.6.
Jun 3, 2011 at 7:18 comment added cnicutar @ysth I don't think it's a rootkit (bash globs it fine).
Jun 3, 2011 at 7:17 comment added ysth anybody know if this is a symptom of a rootkit?
Jun 3, 2011 at 7:16 comment added cnicutar Sounds like a compromised box.
Jun 3, 2011 at 7:15 comment added Omnifarious How very bizarre. I'm extremely curious as to what's going on here. It sounds like something in the ls tool itself since echo * works.
Jun 3, 2011 at 7:12 history asked mrbrdo CC BY-SA 3.0