/usr/sbin/MailScanner.xxxxxx files

[Scott Silva]

on 1/8/2013 9:44 PM Paul R. Ganci spake the following:
> On 01/08/2013 01:33 PM, Gary Faith wrote:
>> Hey, this is something that even I can answer!  These are backups of
>> MailScanner.  Check /root/bin and you will probably see files like these
>> with the main one being bold below.  There should be a cron job in
>> /etc/cron.monthly that run the /root/bin/mailscanner-backup.sh script.
>>  
>> -rwxr-xr-x 1 root root   186 Jan  8  2012 delmsback-20120108.sh
> 
> I should point something else out. The files created are 0 bytes in size!
> 
>> ls -alt /usr/sbin/MailScanner.*
> -rw------- 1 root root 0 Jan  8 22:41 /usr/sbin/MailScanner.6BGzQA
> -rw------- 1 root root 0 Jan  8 22:37 /usr/sbin/MailScanner.RkVPkt
> -rw------- 1 root root 0 Jan  8 22:34 /usr/sbin/MailScanner.9v5JJv
> -rw------- 1 root root 0 Jan  8 20:47 /usr/sbin/MailScanner.5P2C5B
> -rw------- 1 root root 0 Jan  8 18:12 /usr/sbin/MailScanner.IZtAsp
> -rw------- 1 root root 0 Jan  8 17:56 /usr/sbin/MailScanner.SOwYNL
> -rw------- 1 root root 0 Jan  8 17:43 /usr/sbin/MailScanner.EKLmlK
> -rw------- 1 root root 0 Jan  8 17:40 /usr/sbin/MailScanner.KnUr6t
> -rw------- 1 root root 0 Jan  8 14:39 /usr/sbin/MailScanner.g8oJNI
> -rw------- 1 root root 0 Jan  8 14:06 /usr/sbin/MailScanner.2x9cE2
> -rw------- 1 root root 0 Jan  8 13:41 /usr/sbin/MailScanner.cHGFXx
> -rw------- 1 root root 0 Jan  8 13:30 /usr/sbin/MailScanner.z48IF9
> -rw------- 1 root root 0 Jan  8 13:24 /usr/sbin/MailScanner.NRdPRc
> -rw------- 1 root root 0 Jan  8 10:03 /usr/sbin/MailScanner.TIBPVu
> -rw------- 1 root root 0 Jan  8 09:28 /usr/sbin/MailScanner.zslUc8
> -rw------- 1 root root 0 Jan  8 09:28 /usr/sbin/MailScanner.mAZ7bO
> -rw------- 1 root root 0 Jan  8 09:22 /usr/sbin/MailScanner.jbaTZo
> -rw------- 1 root root 0 Jan  8 09:17 /usr/sbin/MailScanner.2YU9Jh
> -rw------- 1 root root 0 Jan  8 05:17 /usr/sbin/MailScanner.Owyr1U
> -rw------- 1 root root 0 Jan  8 05:17 /usr/sbin/MailScanner.gGf0Tl
> -rw------- 1 root root 0 Jan  8 05:17 /usr/sbin/MailScanner.X1EWsk
> -rw------- 1 root root 0 Jan  8 05:16 /usr/sbin/MailScanner.4UIj80
> -rw------- 1 root root 0 Jan  8 05:16 /usr/sbin/MailScanner.ZC6aHh
> -rw------- 1 root root 0 Jan  8 02:53 /usr/sbin/MailScanner.ODat5b
> -rw------- 1 root root 0 Jan  8 02:50 /usr/sbin/MailScanner.vQoJLR
> -rw------- 1 root root 0 Jan  8 02:50 /usr/sbin/MailScanner.VbXibw
> -rw------- 1 root root 0 Jan  8 02:40 /usr/sbin/MailScanner.fsaN9V
> -rw------- 1 root root 0 Jan  8 02:31 /usr/sbin/MailScanner.m4BWwd
> 
> I would really love to turn this off.
> 
> -- 
> Paul (ganci at nurdog.com)
> 
> 
> 
That is very strange..... Maybe a cron job to clean them out until you figure
out what is doing it...