[Eisfair] Hilfe bei Entfernung von Malware benötigt. (kdevtmpfsi)

Fabian Törner fabian at toerners.eisfair.net
Fr Okt 29 14:10:05 CEST 2021


Am 29.10.2021 um 12:50 schrieb Fabian Törner:
> Hallo zusammen,
> 
> Am 17.10.2021 um 13:37 schrieb Fabian Törner:
>> Denke soweit sauber :)
>> Sonst noch etwas?
> 
> hat wer bei euch in dem Zusammenhang evtl. auch folgende Einträge in den 
> Log Dateien - bei mir in messages.log:

Oct 23 10:17:53 eis su: pam_unix(su:session): session opened for user 
wwwrun(uid=30) by root(uid=0)
Oct 23 10:17:54 eis su: pam_unix(su:session): session closed for user wwwrun
Oct 23 10:17:55 eis su: (to wwwrun) root on pts/0
Oct 23 10:17:55 eis su: pam_unix(su:session): session opened for user 
wwwrun(uid=30) by root(uid=0)
Oct 23 10:17:56 eis su: pam_unix(su:session): session closed for user wwwrun
Oct 23 10:18:04 eis su: (to wwwrun) root on pts/0
Oct 23 10:18:04 eis su: pam_unix(su:session): session opened for user 
wwwrun(uid=30) by root(uid=0)
Oct 23 10:18:05 eis su: pam_unix(su:session): session closed for user wwwrun
Oct 23 10:36:29 eis su: (to wwwrun) root on pts/0
Oct 23 10:36:29 eis su: pam_unix(su:session): session opened for user 
wwwrun(uid=30) by root(uid=0)
Oct 23 10:36:29 eis su: pam_unix(su:session): session closed for user wwwrun
Oct 23 10:36:29 eis su: (to wwwrun) root on pts/0
Oct 23 10:36:29 eis su: pam_unix(su:session): session opened for user 
wwwrun(uid=30) by root(uid=0)
Oct 23 10:36:29 eis su: pam_unix(su:session): session closed for user wwwrun
Oct 23 10:36:29 eis su: (to wwwrun) root on pts/0
Oct 23 10:36:29 eis su: pam_unix(su:session): session opened for user 
wwwrun(uid=30) by root(uid=0)
Oct 23 10:36:29 eis su: pam_unix(su:session): session closed for user wwwrun
Oct 23 10:36:29 eis su: (to wwwrun) root on pts/0
Oct 23 10:36:29 eis su: pam_unix(su:session): session opened for user 
wwwrun(uid=30) by root(uid=0)
Oct 23 10:36:29 eis su: pam_unix(su:session): session closed for user wwwrun
Oct 23 10:36:29 eis su: (to wwwrun) root on pts/0
Oct 23 10:36:30 eis su: pam_unix(su:session): session opened for user 
wwwrun(uid=30) by root(uid=0)
Oct 23 10:36:30 eis su: pam_unix(su:session): session closed for user wwwrun



> Kann ich in der Hinsicht noch etwas überprüfen?
> 
> Vielen Dank & viele Grüße
> Fabian
> 


-- 
Diese E-Mail wurde von AVG auf Viren geprüft.
http://www.avg.com



Mehr Informationen über die Mailingliste Eisfair