[prev in list] [next in list] [prev in thread] [next in thread]
List: ubuntu-motu
Subject: Flashgot + d4x + Kubuntu Feisty = rootkit-like hidden directory ??!
From: sai () saizai ! com (Sai Emrys)
Date: 2007-09-21 4:07:33
Message-ID: 646661980709202107o22f0640r990755401369813d () mail ! gmail ! com
[Download RAW message or body]
See details here: http://pastie.caboo.se/99284 (will update there if
anything new; copied below.)
- Sai
Kubuntu Feisty. Everything updated. Want some hardcore nerdcore. Boot
up FireFox.
FFx FlashGot http://frontalot.com/index.php/?page=mp3 -> flashgot all -> d4x ->
save to /home/saizai/download/MC Frontalot (already existed via mkdir) ->
remove non-mp3 entries -> start downloading. Downloads finish; d4x
claims they're done 100%.
Go to check directory. See directory filled with files, but none of
them fully downloaded - 0-20kb.
cd /home/saizai/download && rm -rf MC\ Frontalot
d4x -> set common property -> restart download -> start downloads.
Try to find out if it's downloading, notice that there's no directory
there. Start poking...
... and WTF why are these directories hiding from me? O.o
Ran chkrootkit & rkhunter (updated) - everything clean.
So, WTF gives?
saizai at Piro:~$ uname -a
Linux Piro 2.6.20-16-generic #2 SMP Fri Aug 31 00:55:27 UTC 2007 i686 GNU/Linux
saizai at Piro:~$ mount
/dev/sda5 on / type ext3 (rw,errors=remount-ro)
proc on /proc type proc (rw,noexec,nosuid,nodev)
/sys on /sys type sysfs (rw,noexec,nosuid,nodev)
varrun on /var/run type tmpfs (rw,noexec,nosuid,nodev,mode=0755)
varlock on /var/lock type tmpfs (rw,noexec,nosuid,nodev,mode=1777)
procbususb on /proc/bus/usb type usbfs (rw)
udev on /dev type tmpfs (rw,mode=0755)
devshm on /dev/shm type tmpfs (rw)
devpts on /dev/pts type devpts (rw,gid=5,mode=620)
lrm on /lib/modules/2.6.20-16-generic/volatile type tmpfs (rw)
binfmt_misc on /proc/sys/fs/binfmt_misc type binfmt_misc (rw)
saizai at Piro:~$ cd download/
saizai at Piro:~/download$ ls
16million.png Thingy.wmv MC Frontalot
saizai at Piro:~/download$ ll
total 924
-rw------- 1 saizai saizai 929178 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
drwx------ 2 saizai saizai 12288 2007-09-20 19:03 MC Frontalot
saizai at Piro:~/download$ ll -h
total 924K
-rw------- 1 saizai saizai 908K 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
drwx------ 2 saizai saizai 12K 2007-09-20 19:03 MC Frontalot
saizai at Piro:~/download$ ll -hR
.:
total 924K
-rw------- 1 saizai saizai 908K 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
drwx------ 2 saizai saizai 12K 2007-09-20 19:03 MC Frontalot
./MC Frontalot:
total 0
saizai at Piro:~/download$ mv MC\ Frontalot/ MC/
mv: target `MC/' is not a directory: No such file or directory
saizai at Piro:~/download$ mv MC\ Frontalot MC
saizai at Piro:~/download$ ls -hR
.:
16million.png Thingy.wmv
saizai at Piro:~/download$ ll
total 912
-rw------- 1 saizai saizai 929178 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
saizai at Piro:~/download$ ll
total 912
-rw------- 1 saizai saizai 929178 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
saizai at Piro:~/download$ mkdir MC
mkdir: cannot create directory `MC': File exists
saizai at Piro:~/download$ ll
total 912
-rw------- 1 saizai saizai 929178 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
saizai at Piro:~/download$ ls -a
. .. 16million.png Thingy.wmv
saizai at Piro:~/download$ ls MC
saizai at Piro:~/download$ sudo su -
Password:
root at Piro:~# cd /home/saizai/download/
root at Piro:/home/saizai/download# ls
16million.png Thingy.wmv
root at Piro:/home/saizai/download# ll
total 912
-rw------- 1 saizai saizai 929178 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
root at Piro:/home/saizai/download# rm MC
rm: cannot remove directory `MC': Is a directory
root at Piro:/home/saizai/download# ls -A
16million.png Thingy.wmv
root at Piro:/home/saizai/download# rm jf
rm: cannot lstat `jf': No such file or directory
root at Piro:/home/saizai/download# rm MC
rm: cannot remove directory `MC': Is a directory
root at Piro:/home/saizai/download# ls -a
. .. 16million.png Thingy.wmv
root at Piro:/home/saizai/download# ls -al
total 940
drwx------ 4 saizai saizai 8192 2007-09-20 20:25 .
drwxr-xr-x 72 saizai saizai 20480 2007-09-20 15:21 ..
-rw------- 1 saizai saizai 929178 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
root at Piro:/home/saizai/download# cd MC
root at Piro:/home/saizai/download/MC# ls -al
total 4640
drwx------ 2 saizai saizai 12288 2007-09-20 20:26 .
drwx------ 4 saizai saizai 8192 2007-09-20 20:25 ..
-rw------- 1 saizai saizai 1112064 2007-09-20 20:28
.MC_Frontalot_SFTF_(01)_Secrets_From_The_Future.mp3
-rw------- 1 saizai saizai 16 2007-09-20 20:28
.MC_Frontalot_SFTF_(01)_Secrets_From_The_Future.mp3.segments
-rw------- 1 saizai saizai 3598976 2007-09-20 20:28
.MC_Frontalot_SFTF_(07)_It_Is_Pitch_Dark.mp3
-rw------- 1 saizai saizai 16 2007-09-20 20:28
.MC_Frontalot_SFTF_(07)_It_Is_Pitch_Dark.mp3.segments
root at Piro:/home/saizai/download/MC# cd ..
root at Piro:/home/saizai/download# ls -al
total 940
drwx------ 4 saizai saizai 8192 2007-09-20 20:25 .
drwxr-xr-x 72 saizai saizai 20480 2007-09-20 15:21 ..
-rw------- 1 saizai saizai 929178 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
root at Piro:/home/saizai/download# ls -lR
.:
total 912
-rw------- 1 saizai saizai 929178 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
root at Piro:/home/saizai/download# echo *
16million.png Thingy.wmv
root at Piro:/home/saizai/download# rm -rf MC
rm: cannot remove directory `MC': No such file or directory
root at Piro:/home/saizai/download# cd MC
-su: cd: MC: No such file or directory
root at Piro:/home/saizai/download# ls
16million.png Thingy.wmv
root at Piro:/home/saizai/download# mkdir MC
root at Piro:/home/saizai/download# chown saizai.saizai MC
root at Piro:/home/saizai/download# ll
total 912
-rw------- 1 saizai saizai 929178 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
root at Piro:/home/saizai/download# rm MC
rm: cannot remove directory `MC': Is a directory
root at Piro:/home/saizai/download# rm -rf MC
rm: cannot remove directory `MC': No such file or directory
root at Piro:/home/saizai/download# rm MC
rm: cannot lstat `MC': No such file or directory
root at Piro:/home/saizai/download# exit
logout
saizai at Piro:~/download$ ls
16million.png Thingy.wmv
saizai at Piro:~/download$
saizai at Piro:~/download$ cd MC
bash: cd: MC: No such file or directory
saizai at Piro:~/download$ rm MC
rm: cannot lstat `MC': No such file or directory
saizai at Piro:~/download$ mkdir MC
saizai at Piro:~/download$ cd MC
saizai at Piro:~/download/MC$ ls
saizai at Piro:~/download/MC$ ls -l
total 0
saizai at Piro:~/download/MC$ ls -la
total 12
drwx------ 2 saizai saizai 4096 2007-09-20 20:34 .
drwx------ 6 saizai saizai 8192 2007-09-20 20:25 ..
saizai at Piro:~/download/MC$ cd ..
saizai at Piro:~/download$ ls -la
total 940
drwx------ 6 saizai saizai 8192 2007-09-20 20:25 .
drwxr-xr-x 72 saizai saizai 20480 2007-09-20 15:21 ..
-rw------- 1 saizai saizai 929178 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
saizai at Piro:~/download$ cd MC
saizai at Piro:~/download/MC$ cd ..
saizai at Piro:~/download$ ls -la
total 940
drwx------ 6 saizai saizai 8192 2007-09-20 20:25 .
drwxr-xr-x 72 saizai saizai 20480 2007-09-20 15:21 ..
-rw------- 1 saizai saizai 929178 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
saizai at Piro:~/download$ mkdir MCF
saizai at Piro:~/download$ ls -la
total 944
drwx------ 7 saizai saizai 8192 2007-09-20 20:34 .
drwxr-xr-x 72 saizai saizai 20480 2007-09-20 15:21 ..
-rw------- 1 saizai saizai 929178 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
drwx------ 2 saizai saizai 4096 2007-09-20 20:34 MCF
saizai at Piro:~/download$ mkdir "MC Frontalot"
saizai at Piro:~/download$ ls -la
total 948
drwx------ 8 saizai saizai 8192 2007-09-20 20:34 .
drwxr-xr-x 72 saizai saizai 20480 2007-09-20 15:21 ..
-rw------- 1 saizai saizai 929178 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
drwx------ 2 saizai saizai 4096 2007-09-20 20:34 MCF
drwx------ 2 saizai saizai 4096 2007-09-20 20:34 MC Frontalot
saizai at Piro:~/download$ mkdir MC
mkdir: cannot create directory `MC': File exists
saizai at Piro:~/download$ mv MC\ Frontalot MC_Frontalot
saizai at Piro:~/download$ ls -la
total 944
drwx------ 8 saizai saizai 8192 2007-09-20 20:39 .
drwxr-xr-x 72 saizai saizai 20480 2007-09-20 15:21 ..
-rw------- 1 saizai saizai 929178 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
drwx------ 2 saizai saizai 4096 2007-09-20 20:34 MCF
saizai at Piro:~/download$ cd MC_Frontalot
saizai at Piro:~/download/MC_Frontalot$ ls -la
total 12
drwx------ 2 saizai saizai 4096 2007-09-20 20:34 .
drwx------ 8 saizai saizai 8192 2007-09-20 20:39 ..
saizai at Piro:~/download/MC_Frontalot$ cd ..
saizai at Piro:~/download$ ls -la
total 944
drwx------ 8 saizai saizai 8192 2007-09-20 20:39 .
drwxr-xr-x 72 saizai saizai 20480 2007-09-20 15:21 ..
-rw------- 1 saizai saizai 929178 2007-09-07 02:42 16million.png
-rw------- 1 saizai saizai 0 2007-09-20 20:13 Thingy.wmv
drwx------ 2 saizai saizai 4096 2007-09-20 20:34 MCF
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic