<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffcc" text="#000000">
Richard Klein wrote:
<blockquote
cite="mid:69ce86c30811120723hb0b4173s6ca27c8997d7ae2a@mail.gmail.com"
type="cite">
<pre wrap="">It sounds like you inadvertently left some kind of server running,
maybe SSH or something, and someone took advantage of that to mount a
volume on your desktop. It's not a virus, exactly, but someone
executing commands on your computer. Check what's running on your
computer.
</pre>
</blockquote>
On the G4 I run the QuickTimeStreamingServer (on its own IP#) for
serving videos,<br>
embedded on a website served from a W2K (web) server thru a router (own
IP# too), using 2 different<br>
ISPs connections Been working for years with no problems. <br>
<br>
Checked Activity Monitor on G4 (without QTSS running) and noticed
following "servers", <br>
1. SystemUIServer (Process ID229)/Parent Process: 'loginwindow ', <br>
2 ATSServer (process ID89)/Parent Process: 'launchd ' which the
"sample" cannot examine "for unknown reasons <br>
even though it appears to exist". <br>
3 OSXvnc-server (ID137) Parent Process "sh(124)"<br>
4 QTSS adds the "windowserver" (ID63) Parent Process: "launchd (01)"<br>
<br>
The volume "echo you got owned" writes itself not on the main bootup
drive but on the second<br>
internal drive which contains 2 more volumes.<br>
<br>
<br>
</body>
</html>