It may also be worth noting, that the ps trojan installed with carko.. seems incapable of determining the controlling terminal of processes on Solaris 7 and 8 (possibly on 5.6 too) which results in an error when ps is invoked without arguments... hardly a stealthy rootkit :) Free, encrypted, secure Web-based email at www.hushmail.com IMPORTANT NOTICE: If you are not using HushMail, this message could have been read easily by the many people who have access to your open personal email messages. Get your FREE, totally secure email address at http://www.hushmail.com.
This archive was generated by hypermail 2b30 : Sun Apr 22 2001 - 14:28:08 PDT