readonly.exe ?

[Ceri Davies]

On Wed, Apr 23, 2003 at 11:28:38AM -0700, Kent Stewart wrote:
> On Wednesday 23 April 2003 11:19 am, Ceri Davies wrote:
> > Does anyone have any idea what readonly.exe is ?
> >
> > shrike.private.submonkey.net kernel log messages:
> > > pid 74935 (readonly.exe), uid 0: exited on signal 10 (core dumped)
> > > pid 76059 (readonly.exe), uid 0: exited on signal 10 (core dumped)
> >
> > As far as I can see it doesn't exist on that system, but I'm slightly
> > concerned... (no, there's no core dump either).
> 
> If you run locate, I would try "locate '*.core'" and see who the core 
> belongs to. I would tend to suspect that someone opened an email with 
> an attachment that would do nasty things to a Windows system.

No core file, as I mentioned above, and the uid concerned was 0 (aka root),
otherwise I wouldn't have worried, but the attachment thing was a good idea
otherwise.

Thanks,

Ceri
--