Linux Remote Shell Trojan: Threat, Origian and the Solution

2001-09-10 Thread Douglas J. Hunley
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Overview: At the 5th of September Qualys released a Security Warning regarding a Linux based virus. This virus was called  the Remote Shell Trojan (RST) and it attacks Linux ELF binaries. It has replicating abilities: when run it will infect all

Re: Linux Remote Shell Trojan: Threat, Origian and the Solution

2001-09-10 Thread Rick Sivernell
Doug I got the program it did not find any problems here. Thanks cheers -- Rick Sivernell Dallas, Texas 75287 972 306-2296 [EMAIL PROTECTED] Caldera Open Linux eWorkStation 3.1 Registered Linux User         .~.        / v \       /( _ )\         ^ ^ In Linux we trust!

Re: Linux Remote Shell Trojan: Threat, Origian and the Solution

2001-09-10 Thread Joel Hammer
We have created a set of utilities which can recursively detect and remove the virus from the system. It also has the option to make binaries IMMUNE for future This sounds like a hoax. The utils might be the actual trojan... stayler Amen, Brother. IMMUNE binaries? Give me a break.

Re: Linux Remote Shell Trojan: Threat, Origian and the Solution

2001-09-10 Thread Douglas J. Hunley
On Monday 10 September 2001 22:27, Joel Hammer babbled: We have created a set of utilities which can recursively detect and remove the virus from the system. It also has the option to make binaries IMMUNE for future This sounds like a hoax. The utils might be the actual trojan...

Re: Linux Remote Shell Trojan: Threat, Origian and the Solution

2001-09-10 Thread burns
On September 10, 2001 10:54 pm, Douglas J. Hunley wrote: On Monday 10 September 2001 22:27, Joel Hammer babbled: This sounds like a hoax. The utils might be the actual trojan... except that it was on bugtraq. and it's a perl script that can be reviewed. and nobody has debunked it yet

Re: Linux Remote Shell Trojan: Threat, Origian and the Solution

2001-09-10 Thread dep
On Monday 10 September 2001 11:00, burns wrote: | except that there isn't a single mention by CERT. cert is primarily a reactive, report-after-the-fact outfit. we'd none of us have working computers if we based our security solely on cert advisories. though from bugtraq: Has any expert c

Re: Linux Remote Shell Trojan: Threat, Origian and the Solution

2001-09-10 Thread Shawn Tayler
That was the kicker for me.. On Mon, 10 Sep 2001 22:27:32 -0400, Joel Hammer wrote: We have created a set of utilities which can recursively detect and remove the virus from the system. It also has the option to make binaries IMMUNE for future This sounds like a hoax. The utils

Re: Linux Remote Shell Trojan: Threat, Origian and the Solution

2001-09-10 Thread Shawn Tayler
That is a valid point. However, this whole Immune issue just gives me the heeby-jeebies On Mon, 10 Sep 2001 22:54:56 -0400, Douglas J. Hunley wrote: On Monday 10 September 2001 22:27, Joel Hammer babbled: We have created a set of utilities which can recursively detect and remove the