Re: nouser - rootkit ?

From: Ryan Russell (ryan@securityfocus.com)
Date: 03/11/02


Date: Mon, 11 Mar 2002 13:41:07 -0700 (MST)
From: Ryan Russell <ryan@securityfocus.com>
To: Eric Brandwine <ericb@UU.NET>

On 11 Mar 2002, Eric Brandwine wrote:

> WOW! That is really lame! It may qualify as the first cross-platform
> root kit I've ever seen though ;)
>
> This moron clearly does not know how to use perl regexps (among many
> other things). At least use fgrep!

Just as a bit of fun trivia, lpdw0rm also uses a perl ps "replacement".
It's not the same code as this one.

                                        Ryan

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com



Relevant Pages