Carko + supporting rootkit

From: coca_colaat_private
Date: Sat Apr 21 2001 - 14:43:32 PDT

  • Next message: Lance Spitzner: ""Know Your Enemy: Honeynets" and S-ot-M"

    It may also be worth noting, that the ps trojan installed with carko.. seems
    incapable of determining the controlling terminal of processes on Solaris
    7 and 8 (possibly on 5.6 too) which results in an error when ps is invoked
    without arguments... hardly a stealthy rootkit :)
    Free, encrypted, secure Web-based email at www.hushmail.com
    
    
    IMPORTANT NOTICE:  If you are not using HushMail, this message could have been read easily by the many people who have access to your open personal email messages.
    Get your FREE, totally secure email address at http://www.hushmail.com.
    



    This archive was generated by hypermail 2b30 : Sun Apr 22 2001 - 14:28:08 PDT