[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-users] Scalper Worm!
- Subject: RE: [cobalt-users] Scalper Worm!
- From: Bob G7 <Bob_G7@xxxxxxxxxx>
- Date: Tue Sep 17 22:53:01 2002
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
> As a newbie I read the post and try every help I can get from you guys. I
> run a Raq3
> I just updated to chkrootkit .37, after I ran it, I got a
> bindshell warning,
> which was from portsentry, Thanks G-D!!
> and a Scalper worm warning.
> As far as I've found out, the scalper worm hits FreeBSD systems. There are
> no threads on the list archives for this worm. But going through google, I
> see there is only mention of FBSD with Apache 1.3.26, and its a DOS!
>
> Can it be that a new version of this worm is out?
>
> Any help will be appreciated.
>
Try running chkrootkit a few more times at random times and see if you get
the same hits. It could be a false positive.