Well this is what happened to me a couple of days ago (sorry if I cant remember everything exactly as it was).
I had made a few changes in the wsftpd config (tried enabling anonymous access) and wanted to restart the FTP server. So i ran a little search for vsftpd in init.d.
find /etc/init.d/ | xargs grep "vsftpd" -sl
Ok I thought, S99sxminit must be responsible for vsftpd. So I just ran.
It stopped and started again, but the start took some time. I became curious and checked the current processes. The top process was "rm"… Ok weird, so i checked it's command line and it was something like "rm -irf /shares/Backup /shares/Download /shares/Public" (Backup and Download are shares i have created) Basically the mybook was removing all my data! I quickly stopped the S99sxminit startup (CTRL+C) and that stopped the rm.
I went and looked at the devastation, "luckily" it had removed all my backup data, "unluckily" it had also removed everything in the Download share and half of everything in the Public share (Most of my music and some movies).
FUUUUCK! was my first reaction. Then I settled down and started investigating.
I could not find anything on the entire system that starts a remove of all shares (S99sxminit looks perfectly harmless).
I was pretty sure the flags of the rm was -irf so I searched for:
find / | xargs grep "rm -irf" -sl
But found nothing.
I have spent the weekend trying to recover the removed data (using http://www.ufsexplorer.com/rdr_xfs.php) and I think I got back the most important stuff that went missing. I must buy a couple of more hard-drives for backups is what I learned at least.
The MyBook seems to run fine right now, but I constantly check the processes for suspicious rm's :P.
Can the problem have something to do with enabling anonymous access to the FTP server? I quickly restored the vsftpd config file before shutting down the MyBook
Has anyone had the same experience? Has anyone any idea of what happened? Please do tell :)