Francisco Guerreiro <[EMAIL PROTECTED]> wrote: >I've looked at it for a few minutes, it's the slaper code, with some >comments and a shell script
It's just another slapper variant. Seen it in quite a few boxes out there. Interesting to see: worm war. Release of a worm variant that would clean infected boxes. Easy to accomplish actually: infect, kill all procs known to be worm-variants and delete respective files, alert admin to patch ssl. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
