unknown directories on /root

[leelangco_1]

I have a rx2620 server,with SUSE linux installedã
Recently i found some unknown directories produced in /root during every boot.
my server reboot at 4:58 every day,and the task is controled by crontab.and the unknown objects is produced at 5:00.
now,i want to find out where does that come from?and i want some suggestion from you,thanks!

[leelangco_1]

there is a picture i get from my console

[leelangco_1]

this is the bootmsg in /var/log/

[Michal Kapalka (mikap)]

hi,

did you try to go inside the directory ot just see whats inside ???

you could do it with Inode numbers of the directory and find command combination.

this si an example for file but the same is for the directories.

http://www.cyberciti.biz/tips/delete-remove-files-with-inode-number.html

i would remove the files after investigation,

if your servers is connectted to the Internet direclty, check if your server was not hacked and it isn't used as a part of some spammer gateway ....

PS : check the crontab if there is some scheduled job.

mikap

[leelangco_1]

thank you fot your reply!
but i cannot cd to that directory,beacause the directroy name is not known to me.

yes,i do have crontab job,it matters?
why it write to /root not to mail ?

[Dennis Handly]

>because the directory name is not known to me.

Known or not doesn't matter, it's whether you can type those names.
You could try to cut & paste those names into cd. If that doesn't work, try writing a script which uses the output of "ls / > dirs".

[Matti_Kurkela]

Or use a program that allows you to choose files and directories by pointing at them.

X11 GUI-based file managers can certainly do that, but there is also a simpler alternative: Midnight Commander, a text-based file manipulation GUI.

It is available in most Linux distributions, and the command to run it is usually "mc".

MK