RE: [cobalt-security] have I been 0wn3d?

["Gary M. Root" <groot@xxxxxxxxxxxxxxx>]

|> So basically, there's plenty of info on this list for me to protect
|> myself, but I'm afraid that I've already been owned. Can 
|someone give me
|> a bit of insight as to how to find out for sure?
|
|According to those who've seen it (and assuming that there are no
|variants out yet):
|
|-) "ps -ax | grep bugtraq" will show a process ".bugtraq" if 
|it's running.

I don't see anything when I type the command correctly, but I also
accidentally typed:

"ps -ax | grep bugtrag" (with a "g")

And I get:

"24002 pts/0    S      0:00 grep bugtrag"

What does that mean??

|-) There'll be a file called /tmp/.bugtraq.c in the machine 
|containing the
|worm's source.
|
|HTH,
|
|John
|
|
|_______________________________________________
|cobalt-security mailing list
|cobalt-security@xxxxxxxxxxxxxxx
|http://list.cobalt.com/mailman/listinfo/cobalt-security
|
|