Hacked?

Zmyrgel · 09-20-2006, 03:36 PM

Hi,

Just tried to run previous command as user and it showed following lines which I haven't used:

Code:

 PROMPT_COMMAND='pwd>&7;kill -STOP $$'
 cd "`echo -e '\057media'`"
 cd "`echo -e '\057'`"
 cd "`echo -e '\057home\057zmyrgel'`"
 cd "`echo -e '\057home'`"
 cd "`echo -e '\057home\057wallpapers'`"
 cd "`echo -e '\057'`"
 cd "`echo -e '\057initrd'`"
 cd "`echo -e '\057'`"
 cd "`echo -e '\057boot'`"

Should I get worried or what? Any suggestions on how to proceed? I run "rkhunter -c" and it showed ok on all except user permission / accounts.
What the above should be doing?

unSpawn · 09-20-2006, 07:15 PM

What the above should be doing?
Basically theyre just simple commands, the "\057" is a slash.
Do you by any chance run mc (Midnight commander)?

Zmyrgel · 09-21-2006, 12:02 AM

Hmm... I think I tested the midnight commander. I noticed too that those weren't too malicious looking lines but better safe than sorry. I haven't upgraded my laptops security too much yet... working on it

Still getting familiar with the Debian way of doing things.

Thank you for your help.