NYCPHP Meetup

NYPHP.org

[nycphp-talk] Magic is Illusion?!?

Daniel J Cain Jr. dan at cain.sh
Fri Feb 27 14:01:46 EST 2004


Odd question, possibly OT but the answer should determine that.

Anyone out there run into files like these?

-rwxr-xr-x  1 nobody  wheel  582254592 Jan 19 13:09 magicp8vAAg
-rwxr-xr-x  1 nobody  wheel  582254592 Jan 19 13:09 magicwcYIKc

Found these bad boys on /var/tmp/ on a FreeBSD box.  Not sure they are a
PHP (or an extensions) tmp file or what.  Google, PHP source, and log
files haven't shed any light on this as of yet.

Could this indicate an attack of some kind?  Any thoughts are welcome.

-dan




More information about the talk mailing list