[Zeffie-Users] CTT spam ridden files?

[Zeffie.net Users List]

Hi Folks,

I think this box is rooted. Or a daemon is doing something I can't  
expain.

/home/tmp seems to fill up with files that are named things like

CTTOBapB7
CTTOLBZhT
CTTpC0pfl
CTTpGgiZg
CTTphtANL

[root tmp]# file CTTy7MV7z
CTTy7MV7z: data

And they are full of data like seen below. Each file is around 500  
megs and they were all accessed at roughtly the same time. Has anyone  
else seen this?

[root tmp]# head CTTy7MV7z
13816G@`¾Guest¢G@À¢G at L+€¾`»É\+ ¾úÿ€µl+À¾p½e12/31/07 12:01:04  
PM13815G@`¾Guest¢G@À¢G at L+€¾`»É\+ ¾úÿ€µl+À¾p½e12/31/07 11:58:40  
AM13814G@`¾Free Slots
slotsss at msn.comGermanyL+€¾`»É\+ ¾úÿ€µl+À¾p½e12/31/07 11:34:40 AMCool  
site! Top Online Casino - Free Bonuses 200$ <a href=http://www.newp.org/free2slots/ 
 >free slots</a> [url=http://www.newp.org/free2slots/]free slot[/url]. 
13813G@`¾Guestlotslotsss at msn.comermanyL+€¾`»É\+ ¾úÿ€µl+À¾p½e12/31/07   
8:46:52 AMool site! Top Online Casino - Free Bonuses 200$ <a href=http://www.newp.org/free2slots/ 
 >free slots</a> [url=http://www.newp.org/free2slots/]free slot[/url]. 
13812G@`¾Guestlotslotsss at msn.comermanyL+€¾`»É\+ ¾úÿ€µl+À¾p½e12/31/07   
7:38:41 AMool site! Top Online Casino - Free Bonuses 200$ <a href=http://www.newp.org/free2slots/ 
 >free slots</a> [url=http://www.newp.org/free2slots/]free slot[/url]. 
13820G@`¾Guestlotslotsss at msn.comermanyL+€¾`»É\+ ¾úÿ€µl+À¾p½e12/31/07   
6:21:48 PMool site! Top Online Casino - Free Bonuses 200$ <a href=http://www.newp.org/free2slots/ 
 >free slots</a> [url=http://www.newp.org/free2slots/]free slot[/url]. 
13819G@`¾Guestlotslotsss at msn.comermanyL+€¾`»É\+ ¾úÿ€µl+À¾p½e12/31/07   
5:56:28 PMool site! Top Online Casino - Free Bonuses 200$ <a href=http://www.newp.org/free2slots/ 
 >free slots</a> [url=http://www.newp.org/free2slots/]

-- Jeff.