0

I have recenrly found a file in my folder

called wunderbar_emporium

its details is here

What is that , how it came here and what should i check to make sure what arong has been done to system

  • 1
    Make a copy so you can analyse it later then nuke it from space and reinstall from a known good backup. This SF question and other related questions may be of help to you. – user9517 Oct 6 '10 at 7:10
3

You could try installing rkhunter and/or chkrootkit. But: it might be too late, who knows which files already were modified?

I know it sucks, but:

  • Take the machine offline
  • Try to find out what happened
  • Reinstall machine and take countermeasures right at the start (file change detection programs like fcheck, aide etc)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy