1 Replies - 3835 Views - Last Post: 17 December 2013 - 09:20 AM

#1 CodeCapition1  Icon User is offline

  • D.I.C Head

Reputation: 3
  • View blog
  • Posts: 57
  • Joined: 23-September 10

Strange stuff in my web root?

Posted 27 November 2013 - 08:31 AM

first off here is my set up:
running fedora 18 on my dev PC connecting to server via ssh and terminal
the server is running Cent OS 6.4
im using VIM as an editor for all my web files

ok so when i log in to my web server and get to my root directory, i run a directory list (using ls -l)
and today i found two strange files in there(first two in list below). my problemis this;
first i dont know where they cam from and i want them gone if thats possible. and second i have
tried to open them(using sudo vim *filename*) and i have tried to remove them(using rm *filename*).
both methods fail and im starting to get frustrated.

Directory Listing:
-rw-r--r--.  1 root   root    1835 Oct 28 15:38 '
-rw-r--r--.  1 apache apache   111 Sep 24 14:31 -1
drwxr-xr-x.  3 apache root    4096 Nov 26 09:55 images
drwxr-xr-x.  2 root   root    4096 Nov 26 10:48 include
-rwxr-xr-x.  1 apache root    3429 Nov 26 12:39 index.php
-rw-r--r--.  1 root   root    2671 Oct 30 13:21 proscan.php
-rw-r--r--.  1 root   root    3554 Nov 26 10:34 scan.php
-rwxr-xr-x.  1 apache root     480 Sep 26 08:12 style.css
drwxr-xr-x.  2 root   root    4096 Oct 31 15:57 web_forms
-rwxr-xr-x.  1 root   root    2944 Nov 26 12:04 functions.php



does anyone know how to possibly get rid of these files and more imporntantly where they came from maybe?
the return when i tried to remove them was as such;


trying to open and view the file "-1"

[tjackson@invsys html]$ sudo vim -1
VIM - Vi IMproved 7.2 (2008 Aug 9, compiled Apr  5 2012 10:17:30)
Unknown option argument: "-1"
More info with: "vim -h"




and trying the "`" file;

[tjackson@invsys html]$ sudo vim `
>




this one just brings up the greater than symbol once i hit enter i waited the second
time and after 4 mins no change on the screen so i had to Ctrl + c to stop process

Is This A Good Question/Topic? 0
  • +

Replies To: Strange stuff in my web root?

#2 no2pencil  Icon User is online

  • Toubabo Koomi
  • member icon

Reputation: 5191
  • View blog
  • Posts: 26,901
  • Joined: 10-May 07

Re: Strange stuff in my web root?

Posted 17 December 2013 - 09:20 AM

that is a suspicious file! I once removed an irc virus off a clients server, & the directories were blank spaces in /tmp/. The best way to handle this is to use quotes, or move all of the good files to a new sub-directory, & then remove all files. If that doesn't work, move all the good files to a new directory out side of this one, & just remove the directory.

I would however want to view the contents of that file first.

Try things like vi \' or vi "'"
vi \-1 or vi "-1"
Was This Post Helpful? 0
  • +
  • -

Page 1 of 1