I've got a Worm in my Linux Box

mushroom · #1 (**permalink**) 03-12-2005, 02:37 PM

Yes that's right I have a worm in one of my linux boxes and I don't know what to do with it.

It's an e-mail worm called "Worm.SomeFool.P".

How did I get this worm?
Well I followed the instructions from my ISP, for some strange reason he likes to work on windows but uses FreeBSD for his servers.

Anyhow he asked me to FTP a certain file "z1" from his server to my machine then to e-mail it to him as an attachment.

Woops ........ his server would not accept my e-mail .. and I tried several times ..... some how this made him very happy.

It turns out he just installed ClamAV on his mail server to slow or stop the spread of windows e-mail viruses and needed me to test it for him as he could not.

NOW I have this little worm in my machine, it has done me no harm so I can't justify killing it,
I can not send it back out in to the world to feed as all my e-mails get rejected,
if I keep it it will starve as it can not feed in a Linux environment.
So just what should I to do ?

wednesday · #2 (**permalink**) 03-12-2005, 05:32 PM

Install a virtual macnine with windows and put the warm in this 'aquarium'. You may also find him a girl. And have one happy warms family . :-p

Martin

mushroom · #3 (**permalink**) 03-12-2005, 10:38 PM

Glad to see some one got my joke, even though the facts are 100% true, it is still a joke.

Right now it is resting peacefully in a folder I created for it, at some future date I may wish to dissect it.

wednesday · #4 (**permalink**) 03-13-2005, 02:37 PM

Quote:

Originally Posted by mushroom

I may wish to dissect it.

ughh... I vote amnesty! Set it free! :)

Martin

ITGProductions · #5 (**permalink**) 03-15-2005, 12:16 PM

Mushroom it seems this is spyware related and it seems to big a bigger threat to linux then first reported. This relatively new worm is a variant of the "Slapper" worm which targets Apache servers. See related link for more info:
http://www.pcw.co.uk/news/1135068

Potentially a huge concern for for us linux users....

Hummm... seems virtual fishing takes a new on a whole new meaning...

mushroom · #6 (**permalink**) 03-15-2005, 05:03 PM

Quote:

Originally Posted by ITGProductions

This relatively new worm

Quote:

16 Sep 2002

I see you had to go back quite a while to find an example.

flood6 · #7 (**permalink**) 03-16-2005, 12:05 AM

There was a slashdot about this recently.

Very humorous! A while ago I read a similar story somewhere about a guy did something similar with Windows 3.1. Apparently Windows 3.1 is like Fort Knox for virus protection.