weird folder with ms printer drivers in my home folder
Rashkae
ubuntu at tigershaunt.com
Wed Nov 11 02:42:00 UTC 2009
Rashkae wrote:
> Vitorio Okio wrote:
>> All at a sudden I've found a strange folder in /home on my Jaunty.
>>
>> The folder is using apparently random 30 digits number for its name. It
>> contains 2 sub-folders: /amd64 and /i386. Each of those in their turn
>> contains a bunch of same files: several .dll's, .cat, .gpd, and .inf
>> files. According to a time stamp the folder is about couple of months
>> old.
>>
>> The .inf file in each mentioned above sub-folders suggests that these are
>> files for "Microsoft system driver files for XPSDrv print drivers."
>>
>> I cannot imagine how possibly this crap could happen in my /home on a
>> pure Linux laptop that is operated within a pure Linux network
>> environment.
>>
>> Any suggestions folks? Should I be worried about integrity of my little
>> network?
>>
>> Though I do not see how possibly this junk could be used withing Ubuntu,
>> especially considering its weird location in /home folder.
>
> I've been compromised by a worm before, and well know it's possible, but
> this doesn't look anything like that.
>
> If I were to make a wild arse guess, I think you must at some time have
> installed a package that provides universal Cups printer driver for
> windows network clients. I'm not at all certain the files are supposed
> to be located in /home, but perhaps they got moved there by accident?
Nope, that's not it, the cups windows driver is i386 only.... so I think
you must at some point in time have connected to a printer from windows
via samba, with administrative rights, and uploaded the driver, which
should have gone into /var/lib/samba/printers
More information about the ubuntu-users
mailing list