[Full-Disclosure] Re: Linux Slapper Worm code (removal)

• Previous message: Chris Norris: "Re: Huge Autoexec.bat"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Ray Slakinski wrote:

> Ok now that I have it, :( whats the best way to remove it....
>
> Ray
>
>
Until someone modifys and recompiles the beast this should remove a 
default infection.

[root@frodev tmp]# fuser -n udp 2002
2002/udp:             3042
[root@frodev tmp]# ps -ef | grep 3042
root      3042     1  0 10:06 pts/1    00:00:00 .bugtraq 10.102.28.15
[root@frodev tmp]# kill -9 3042
[root@frodev tmp]# rm /tmp/.uubugtraq /tmp/.bugtraq.c /tmp/.bugtraq
-KF




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

• Next message: Russell Harding: "Re: What's on udp/2002 ?"
• Previous message: Chris Norris: "Re: Huge Autoexec.bat"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Sep 18 2002 - 15:31:25 PDT