jak mazat /mail ?

[Marek Andricik]

Pavel Machek wrote:
> 
> : Cosi som pred par tyzdnami cital o viruse na SunOS, takze to je celkom 
> : realna moznost. 
> 
> :-))))))))))))))))))))))))))))))))
> A ja myslel ze lidi kolem unixu na pohadky neveri :-) Ten NFS je podstatne
> pravdepodobnejsi, nebo maj suni jeste jednu chybu v kernelu. 

Nuz fajn, tak tu to je v plnej krase. Ci je to cele pakaren, to nech si 
uz zisti kazdy sam. Mna SunOS velmi nezaujima. Zelam pekny den.

-----

r00t VIRUS advisory                                     [ Sunny Day Virus ]

-- Synposis
This is the first known, widely distributed virus, for SunOS/Solaris
machines running on SPARCstations and SPARC clones.  The virus runs as root
and corrupts various critical kernel tables at seemingly random intervals.

The virus is believed to enter machines through various holes in sendmails
version 8.6.9 + (Including the 8.7.x line of sendmail).  Once having entered
a system the virus mutates as it infects each file.

-- Detecting the virus
The virus does leave noticeable trails.  At hourly intervals it will make a
random /usr/bin binary suid root.  Upon each chmod 4755 it performs the last
program it 4755'd will be restored to it's orginal permissions.

-- Removing the virus
r00t recommends a complete OS reinstallation.

-- Preventing the virus
The virus can be prevented by downgrading to a version of sendmail older than
8.6.9 or by not running sendmail at all.  As far as we've deteced so far, the
virus does not attempt to enter through any other remote services.

r00t -- giving it all away.

-----

Marcus
--        
  ,:||:,:||:,          Marek Andricik, IRC Nevedko, postgraduate student, pgp
+:||<>||:><||:-    andricik na oko.fei.tuke.sk, http://oko.fei.tuke.sk/~andricik
  ':||:':||:'  I'm proud to own MY heart! This is MY heart! This is MY heart!
                                                        [Misplaced Childhood]