Locating a hidden file


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers Locating a hidden file
# 1  
Old 05-22-2012
Locating a hidden file

it seems one of my server's account was compromised.
I caught a perl script running a hack/attack script:

20:23 /usr/bin/perl ./up **.**.**.** 0 120

I've disabled the user etc, but I cannot find the script "up" anywhere in the server.
I tried using locate or find.

any ideas?
# 2  
Old 05-22-2012
It's possible to delete or rename files in use, either could have happened.

If you know the account that created the file, search for all files belonging to that account with find. When someone broke into my 'testuser' account, that found everything...
 
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Rsync - how to copy hidden folder or hidden files when using full path

Hello. I use this command : rsync -av --include=".*" --dry-run "$A_FULL_PATH_S" "$A_FULL_PATH_D"The data comes from the output of a find command. And no full source directories are in use, only some files. Source example... (2 Replies)
Discussion started by: jcdole
2 Replies

2. UNIX for Dummies Questions & Answers

List all directories hidden or not hidden

I want to list all directories hidden or not hidden. ls -ld */ => shows only not hidden directories so i guess the answer would be to add the a option to show all files ls -lad */ => not working :confused: ls -la | grep "^d" => works But I would like to know why I can't use ls -lad... (4 Replies)
Discussion started by: servus
4 Replies

3. UNIX for Dummies Questions & Answers

Locating and Extracting Specific Patterns from a file

Hi all, 1. I have a file that is getting continously refreshed (appended) I want to grep all the strings containing substring of the type abcdf123@aaa.xxx.yyy.zzz:portnumber: where, before @, any letters or numbers combination, after @, IP address then symbol : then port... (4 Replies)
Discussion started by: kokoras
4 Replies

4. Ubuntu

Help with locating a file (to download)

debian_base_system.tar.bz2 is what I am looking for. Hello All; I am trying to learn Linux and have done some work, now I am installing Xen virtual machine But I need a .tar.bz2 file which is the base Operating System (for Ubuntu or Debian)* but I do not know where to download it from, the... (2 Replies)
Discussion started by: Matey
2 Replies

5. Shell Programming and Scripting

Dynamically locating a file

Hi, I have a requriement where in I need to install a s/w by executing the installable file through a script. The script currently contains the path of the installable file. I need to now update the script accordingly such tht it identifies the location of the installable file automatically and... (1 Reply)
Discussion started by: yoursdavinder
1 Replies

6. Shell Programming and Scripting

Finding Hidden files and protecting the folder containing hidden files from deletion

Hi. I have a script which is deleting files with a particular extension and older than 45 days.The code is: find <path> -name "<filename_pattern>" -mtime +45 -exec rm {} \; But the problem is that some important files are also getting deleted.To prevent this I have decide to make a dummy... (4 Replies)
Discussion started by: pochaw
4 Replies

7. Shell Programming and Scripting

How to check for hidden file

Hi All, Is there hidden files somewhere here since it's showing "total 16", but no files being revealed ? $ ls -la total 16 8 drwxrwxrwx 2 zzz yyy 4096 Apr 26 12:00 ./ 8 drwxrwxrwx 9 zzz yyy 4096 Jul 31 16:59 ../ $ (8 Replies)
Discussion started by: Raynon
8 Replies

8. UNIX for Dummies Questions & Answers

locating the last file in the directory

i have few files in a directory.. i want to know , how to locate or display that last file in the directory which has the max date.. pls help (2 Replies)
Discussion started by: wip_vasikaran
2 Replies

9. Filesystems, Disks and Memory

How to make a file Hidden

Please tell me how to make a file hidden whose name is not starting with (.) dot ( Sorry I am Biginer) (1 Reply)
Discussion started by: gandhevinod
1 Replies
Login or Register to Ask a Question