[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [suse-security] Found file in /dev: "h"



On Tuesday 29 June 2004 07:47, Manfred Rebentisch wrote:
> Hello,
> I found  a normal file in /dev: "h" on one of my servers:
> # ls -al /dev/h
> -rw-r--r--    1 root     root          446 Feb 19 14:17 /dev/h
>
> It contains the following text between binary code:
> Invalid partition table^@No operating system^@Error loading
> operating system
>
> Is this from a rootkit or normal to SuSE 9.0?

Don't know, but 446 is exactly the root sector loader size without 
partition table, and is definitely not found on pristine 
installations! Keep us informed about your research...

Pete


-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here