Focus on Virus
Back to list
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Re: ELF_SSHSCAN.A and ELF_PORTSCAN.A
Nov 10 2005 06:18PM
Stephen J. Smoogen (smooge gmail com)
Not sure that these are viruses. I think they are part of a root-kit
that scans the internet for ssh servers that have bad passwords. I
would consider your RH box to have been compromised somehow until
proven otherwise. The usual suspects would be:
a) the box has guesable passwords that the ssh aut...
[ more ]
Copyright 2010, SecurityFocus