The following is part of the output from ls -sailF /bin /usr/sbin. What is suspicious about it?
64236 168 -r-xr-xr-x 1 root 160028 May 2 20:53 /bin/csh* 64293 192 -r-xr-xr-x 2 root 180816 May 2 20:58 /bin/ksh* 64285 88 -r-xr-xr-x 3 root 89564 May 2 21:02 /bin/sh* 309872 144 -r-xr-xr-x 1 root 137984 Aug 19 14:58 /usr/sbin/in.named* 309704 9 -r-xr-xr-x 1 root 8532 May 2 20:56 /usr/sbin/in.rexecd* 309705 10 -r-xr-xr-x 1 root 9672 May 2 20:56 /usr/sbin/in.rlogind* 309707 10 -r-xr-xr-x 1 root 9836 May 2 20:56 /usr/sbin/in.rshd* 309710 88 -r-sr-xr-x 3 root 89564 Aug 22 03:05 /usr/sbin/in.telnetd*
Send email to
cs153@csif.cs.ucdavis.edu.
Department of Computer Science
University of California at Davis
Davis, CA 95616-8562