Re: Possible Slapper Worm Infection

2004-01-15 Thread Barry Skidmore
> I reported a bug a couple of versions ago where scalper was > mis-reported. Scalper is supposed only to go for *BSD systems running > apache. Are you sure you're running 0.43? Yes, I confirmed with 'chkrootkit -V' that I am running version 0.43. Do you have any suggestions about what might be

Re: Possible Slapper Worm Infection

2004-01-15 Thread s. keeling
Incoming from Barry Skidmore: > > On Thu, Jan 15, 2004 at 05:21:05PM -0500, Barry Skidmore wrote: > > I am using Debian (woody)-i386 on a home network. > > > > I run chkrootkit (0.43) daily, and today's report suggests that I might > > have been infected with the 'slapper' worm. Network Associat

Re: Possible Slapper Worm Infection

2004-01-15 Thread Barry Skidmore
Sorry, I meant to say 'scalper' worm, NOT 'slapper' worm On Thu, Jan 15, 2004 at 05:21:05PM -0500, Barry Skidmore wrote: > I am using Debian (woody)-i386 on a home network. > > I run

Possible Slapper Worm Infection

2004-01-15 Thread Barry Skidmore
I am using Debian (woody)-i386 on a home network. I run chkrootkit (0.43) daily, and today's report suggests that I might have been infected with the 'slapper' worm. Network Associates web site has a good description of this worm, including some of the symptoms of the infection. These include th