--opJtzjQTFsWo+cga Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Nikolay Pavlov <[email protected]> scribbled: > Hi, Justin >=20 > On Tuesday, 17 August 2004 at 23:01:28 -0500, Justin wrote: > > I'm seeing the same thing in my log. It makes me think it is a virus be= cause=20 > > test, guest, and admin are not normal unix users. >=20 > And I'm too. But I think that this is a some kind of Linux worm. > The first record in my auth.log dated on Jul 23 01:48:30 > Nmap identificates all hosts (already more than ten) in my auth.log as=20 > "Linux 2.4.0 - 2.5.20, Linux 2.4.20 (Itanium), Linux 2.4.20 - 2.4.22 w/gr= security.org patch" >=20 > Best regards, > Nikolay Pavlov. > _______________________________________________ > [email protected] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "[email protected]= g" >=20 This has recently and fully been discussed on the full-disclosure mailing list. --=20 Kind regards, Devon H. O'Dell | [email protected] Key: 4D3D8CA7 | IRC: bofh@WhatNET thebofh@efnet --opJtzjQTFsWo+cga Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFBIyfh9y+/hU09jKcRAtn7AJ4trXkGagbp47uf7uJaKNFTx8gUEQCgj+wZ BkC9cGHVTPkoxGOb3kUwSgk= =yuNy -----END PGP SIGNATURE----- --opJtzjQTFsWo+cga--