I scanned the disk with the latest (version 3.12a) of f-prot in linux updated nov.4 2002. The worm is still there because it try keep sending information to the ip-adresses I mentioned.
[EMAIL PROTECTED] wrote:
I can find no reference to CIH2003. Which virus scan program found them?
Does their web site have any information about it being an internet worm and
cross-infecting Linux systems?
What makes you think the Linux system is compromised?
Cameron
> -----Original Message-----
> From: linux power [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, 7 November 2002 10:34
> To: redhat mail list
> Subject: The worm came from nkv.ukshells.co.uk
>
...
>
> I've also found 65 infected files
>
> with W32CIH2003 mainly on my windows partitions.
>
> So if anybody know about that irc worm and how to remove it
> whitout installing
>
> linux again I'll be happy.
>
>
>
>
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@redhat.! com?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list
http://home.no.net/~knutove/knut_ove_hauge_kuren.htm
Yahoo! Mail har fått nytt utseende
Nytt design, enklere å bruke, alltid tilgang til Adressebok, Kalender og Notisbok
