Re: ADM Worm. Worm for Linux x86 found in wild.

[agora () agoractvm com br (Dep. de Teleinformática)]

"Ben Cantrick (Macky Stingray)" wrote:
> 1. Summary
>
>   On the week of 3/7, a polite mail from a system administrator at a
> company in Russia tipped me off to one of our Redhat boxes portscanning
> one of their subnets. Subsequent investigation found that a worm had
> infected the offending box and was attempting to propagate itself.

Ohh, I forgot, you put the binarys, try check the source code:

http://www.genocide2600.com/~tattooman/ADM/ADMw0rm-v1.tgz




--
                        Nelson / Guilherme
                 Departamento de Teleinfomática
         ÁGORA Corretora de Títulos e Valores Mobiliários S/A
                  Rio de Janeiro - RJ - Brasil

*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
"Aquele que pergunta, e' tolo por 5 minutos. E aquele que nao pergunta
e' tolo por toda a vida !"
                                                        (Confucio)
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*