Date: Tue, 18 Mar 2003 13:35:05 +0200
From: Catalin Bucur <[EMAIL PROTECTED]>
Subject: [rlug] Re: Segmentation Fault in Slackware
8.1

Un hacler wrote:
> Cu riscul de a fi insistent inca o informatie :
> 
> bash-2.05a# strace mount
> execve("/sbin/mount", ["mount"], [/* 32 vars */]) =
0
[...]
> open("/proc/uptime", O_RDONLY)          = 3
> read(3, "3748.72 3027.05\n", 128)       = 16
> close(3)                                = 0
> getpid()                                = 1443
> getpid()                                = 1443
> open("/proc/1443/exe", O_RDONLY)        = 3
> read(3,

E virusul Linux.OSF.8759 sau o varianta de-a lui. Nu
are de ce sa 
consulte mount-ul /proc/uptime si /proc/1443/exe.

"Another detail is if the system uptime is 5 minutes
or less, the virus 
will also terminate execution, probably in order to
prevent simple 
inspection on 'test' machines." - de aia consulta
/proc/uptime.

Mersi mult am citit ce si cum :) Chestia ciudata e ca
am mai instalat de pe acelasi cd pe alte calculatoare
si totul a fost ok, maj erau athon xp.

Deci am 5 minute sa-i dau in barba:)

__________________________________________________
Do you Yahoo!?
Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop!
http://platinum.yahoo.com
--
Pentru dezabonare, trimiteti mail la 
[EMAIL PROTECTED] cu subiectul 'unsubscribe rlug'.
REGULI, arhive si alte informatii: http://www.lug.ro/mlist/


Raspunde prin e-mail lui