Strange files in temp dir

stefaandk · 11-22-2005, 04:33 PM

Hi

I'm getting these files in my temp dir and I have no idea where they are from:

-rw------- 1 apache apache 3.3K Nov 23 07:56 5Atf64
-rw------- 1 apache apache 3.6K Nov 23 06:43 BZRSbw
-rw------- 1 apache apache 4.4K Nov 23 07:56 D4hD1Z
-rw------- 1 apache apache 15K Nov 23 06:43 Fe1TKh
-rw------- 1 apache apache 15K Nov 23 08:31 HB4LLu

A bit worried abou these really.

Content is binary, is there any way I can trace back what site put them there?

Thx

jailbait · 11-22-2005, 06:01 PM

"is there any way I can trace back what site put them there?"

I suggest that you read through the files using a hex editor. I recommend ghex which is run as ghex2.

--------------------------------
Steve Stites

raseel · 11-23-2005, 04:38 AM

the user and group in your listing shows that its owned by apache.

Are you running apache ? Maybe these are intermediate files produced by it.... although I have to admit they have a wierd naming convention ... never seen before.

But its in the temp dir right ? So no problem in deleting them if you are really concerned.

jailbait · 11-23-2005, 10:15 AM

"But its in the temp dir right ? So no problem in deleting them if you are really concerned."

If Apache happens to be using them then deleting them could cause Apache to fail.

--------------------------
Steve Stites

stefaandk · 11-24-2005, 04:24 PM

They do seem to be temporary apache files, can't find anything readable in them using a hex editor either.

Bit of a weird naming indeed but I supose a random named temp file makes sense in a way.