Adore worm


Name: Adore worm
Aliases: Linux/Adore, Linux/Red, Butcher, Red worm,
Ports: 65535
Files: Butcher.tgz - Red.tgz - Butcher.gz - ps - 0anacronis - klogd -
Created: Apr 2001
Requires: GLIBC_2.1.3 - is required to run version .02 of the worm.
Actions: Worm / Backdoor / Hacking tool
The worm searches for known vulnerabilities in wu-ftpd, BIND, LPRngand rpc.statd. If any of them are found, the worm hacks the Linux systemand becomes root. It also mails information to one of four Chineseaddresses.
Versions: .01, .02,
Registers:
Notes: Works on Unix (Linux). Attacks Linux Red Hat 7.0 running on x86processors.
Country: written in China
Program:

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>