Re: [suse-security] Possible compromised service

Hi, Bit late perhaps but have you checked if those files aren't uploaded from a CDR, ZIP or something like that? Other question is it possible to gain local access to you server? Other possible reason as far as I know scp isn't logged by default so if someone has an account he could upload something. And you'r not able to find anything in the logs. Don't know if it helps but ..... DL