new SunOS 5 rootkit? (fwd)

From: Alan Thew (Alan.Thewat_private)
Date: Thu Feb 14 2002 - 02:26:26 PST

  • Next message: david evlis reign: "heads up: worm on the loose" 

    Anyone seen this before? contains trojaned ls, netstat, ps and others.
In addition on port 5654 , Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
SSH-1.5-1.2.25

is installed and setup to start at reboots etc...

Thanks

-- 
Alan Thew
FAX: +44 151 794 4442

---------- Forwarded message ----------
     #
    #
   #   #
    # # #       RootKit fr SunOS
 #   #   #      (C) Adolf Hitler / NSDAP
  # # #
   #   #          English version.. for you scriptkids.
      #
     #

988113360






----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

    This archive was generated by hypermail 2b30 : Thu Feb 14 2002 - 08:53:33 PST