On Fri, Mar 23, 2001 at 04:34:37PM -0600, Melissa Plunkett wrote:
> > The t0rn rootkit replaces several binaries on the system in order to
> > stealth itself. Here are the binaries that it replaces:
> >
> > du, find, ifconfig, in.telnetd, in.fingerd, login, ls, mjy, netstat,
> > ps, pstree, top
Hey all, if you are running BIND you might want to take a
look at this. Nasty indeed.
Melissa
> -Original Message-
> From: The SANS Institute [mailto:[EMAIL PROTECTED]]
> Sent: Friday, March 23, 2001 1:35 PM
> Subject: ALERT - A DANGEROUS NEW WORM IS SPREADING ON THE INTERNET
>
>
