Security Breach ?
Stefan Lange
stefan.lange at hlplanar.de
Thu Mar 3 17:07:37 UTC 2005
Hi Chris,
Chris Strzelczyk schrieb:
> Yes, I did have a couple of PERL programs in /var/tmp. One was called
> https and it is attached.
this is what my AV found:
> Dateianlage Name des Virus durchgeführte Maßnahmen
> ----------------------------------------------------------------------
> https Backdoor.Perl.Shellbot.a Removed
http://www.viruslist.com/en/viruses/encyclopedia?virusid=56186
I hope, the name of the bot can help you to trace the way
your system got infected...
Stefan
More information about the fedora-list
mailing list