Cu riscul de a fi insistent inca o informatie :[...]
bash-2.05a# strace mount execve("/sbin/mount", ["mount"], [/* 32 vars */]) = 0
open("/proc/uptime", O_RDONLY) = 3
read(3, "3748.72 3027.05\n", 128) = 16
close(3) = 0
getpid() = 1443
getpid() = 1443
open("/proc/1443/exe", O_RDONLY) = 3
read(3,
E virusul Linux.OSF.8759 sau o varianta de-a lui. Nu are de ce sa consulte mount-ul /proc/uptime si /proc/1443/exe.
"Another detail is if the system uptime is 5 minutes or less, the virus will also terminate execution, probably in order to prevent simple inspection on 'test' machines." - de aia consulta /proc/uptime.
-- Catalin Bucur mailto:[EMAIL PROTECTED] NOC @ Genius Network SRL - Galati - Romania
--
Pentru dezabonare, trimiteti mail la [EMAIL PROTECTED] cu subiectul 'unsubscribe rlug'.
REGULI, arhive si alte informatii: http://www.lug.ro/mlist/
