Francisco Guerreiro <scentmail.pt> wrote:

>I've looked at it for a few minutes, it's the slaper code, with some
>comments and a shell script

 It's just another slapper variant. Seen it in quite a few boxes out
there. Interesting to see: worm war. Release of a worm variant that
would clean infected boxes. Easy to accomplish actually: infect, kill
all procs known to be worm-variants and delete respective files, alert
admin to patch ssl.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]