full-disclosure - Re: Linux Slapper Worm code (removal)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <3D873910.9080909@snosoft.com>
From: dotslash at snosoft.com (KF)
Subject: Re: Linux Slapper Worm code (removal)

Ray Slakinski wrote:

> Ok now that I have it, :( whats the best way to remove it....
>
> Ray
>
>
Until someone modifys and recompiles the beast this should remove a 
default infection.

[root@...dev tmp]# fuser -n udp 2002
2002/udp:             3042
[root@...dev tmp]# ps -ef | grep 3042
root      3042     1  0 10:06 pts/1    00:00:00 .bugtraq 10.102.28.15
[root@...dev tmp]# kill -9 3042
[root@...dev tmp]# rm /tmp/.uubugtraq /tmp/.bugtraq.c /tmp/.bugtraq
-KF