Do you have a question? Post it now! No Registration Necessary. Now with pictures!
- Piotr Sobolewski
May 13, 2005, 5:52 am
rate this thread
I try to write a tiny tool to check the filesystem for hidden files - I mean
files which can not be seen by ls (eg because of some rootkit hiding them).
White testing I found out something strange. I use debugfs to
view /dev/hda1, I list /home/zenek/.opera/cache4 directory and I see there
1246391 100600 (1) 1000 1000 419769 9-May-2005 06:48 opr02C51.pdf
Well, this is quite ok.
But I also see such files:
0 0 (1) 0 0 0 opr01VH4.gif
No creation time, size 0, owner 0... And ls can't see that files.
What are that files? Do you have any idea?
Piotr Sobolewski http://www.rozrywka.jawsieci.pl/materialy /
- » Cloud Ace Technologies is offering Implementation Services on Cloud Computing, Cloud Serv...
- — Newest thread in » Linux Security