<br><br><div class="gmail_quote">On Wed, Apr 1, 2009 at 7:36 AM, Mike Perkins <span dir="ltr"><<a href="mailto:mikep@randomtraveller.org.uk">mikep@randomtraveller.org.uk</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="im">David Herman wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br>
I am running .22, but I have seen these files on and off for the last year<br>
(so it was there for .21).. I think it may be tied to nuvexport, but am<br>
unsure... Yesterday, I did a cleanup when I did a trunk update and removed<br>
all of them. I have /usr/local as gloabally writeable (as I am the only<br>
user on the box). All I run is Firefox, mythtv (and associated plugins) and<br>
mplayer on this box. As you know nothing about it, I will drop the topic.<br>
</blockquote></div>e<br>
<br>
Whenever you find out where these files come from, we'd like to know, so that we (the community) can either cross this off the list or apply a fix/workaround. That would be good development practice.<br>
<br>
Those files may not have anything to do with myth. Your box might have been rootkitted/pwned instead. Whatever, a line or two with the cause would be useful, once you figure it out.<br>
<br>
-- <br><font color="#888888">
<br>
Mike Perkins<br>
<br>
</font></blockquote></div>Ok.. Files are back, but I think they are from actually building myth and doing a checkinstall.<br><br>files...<br><br>in /usr/local/lib:<br>-rw------- 1 root root 0 2009-04-04 21:48 st3tHPvg<br>
-rw------- 1 root root 0 2009-04-04 21:48 st6LIAgL<br>-rw------- 1 root root 0 2009-04-04 21:48 st8aWMFA<br>-rw------- 1 root root 0 2009-04-04 21:48 stbRgEOE<br>-rw------- 1 root root 0 2009-04-04 21:48 sthoDVWs<br>-rw------- 1 root root 0 2009-04-04 21:48 stJ6kH1M<br>
-rw------- 1 root root 0 2009-04-04 21:48 stKWsXp4<br>-rw------- 1 root root 0 2009-04-04 21:48 stNTCqqj<br>-rw------- 1 root root 0 2009-04-04 21:48 stPkM4dN<br>-rw------- 1 root root 0 2009-04-04 21:48 stwgmUap<br>-rw------- 1 root root 0 2009-04-04 21:48 stZpH4fB<br>
<br>in /usr/local/bin:<br>-rw------- 1 root root 0 2009-04-04 21:56 st2NBgQt<br>-rw------- 1 root root 0 2009-04-04 21:48 st3yC0Fs<br>-rw------- 1 root root 0 2009-04-04 21:48 st41YmJR<br>-rw------- 1 root root 0 2009-04-04 21:48 st4ydexD<br>
-rw------- 1 root root 0 2009-04-04 21:48 stbANtcu<br>-rw------- 1 root root 0 2009-04-04 21:48 steEp982<br>-rw------- 1 root root 0 2009-04-04 21:48 stEJgYuW<br>-rw------- 1 root root 0 2009-04-04 21:48 sti92FCi<br>
-rw------- 1 root root 0 2009-04-04 21:48 stMKGyWn<br>-rw------- 1 root root 0 2009-04-04 21:48 stO6KZdE<br>-rw------- 1 root root 0 2009-04-04 21:48 ston6eKD<br>-rw------- 1 root root 0 2009-04-04 21:56 stq3SC9I<br>
-rw------- 1 root root 0 2009-04-04 21:48 stTtPPlq<br>-rw------- 1 root root 0 2009-04-04 21:56 stUnI4h0<br>-rw------- 1 root root 0 2009-04-04 21:48 stV9C93n<br>-rw------- 1 root root 0 2009-04-04 21:48 stzOoxoy<br>
<br>I have verified that the file dates are IDENTICAL to the checkinstall run<br><br>Dave<br><br>