[1429] in linux-security and linux-alert archive
[linux-security] Linux virus
daemon@ATHENA.MIT.EDU (The Reptile)
Wed Feb 5 04:39:00 1997
Date: Tue, 4 Feb 1997 16:35:09 -0500 (EST)
From: The Reptile <reptile@interport.net>
Reply-To: The Reptile <reptile@interport.net>
To: linux-security@redhat.com
Resent-From: linux-security@redhat.com
It seems that bliss can uninfect files that it infects if you run an
infected program with the --bliss-uninfect-files-please argument.
First:
------------------
infecting: ls, 25604 bytes
infect() returning success
------------------
And then, when told to disinfect: (./ls --bliss-uninfect-files-please)
------------------
/home/virtest/ls, ver 10002, at Tue Feb 4 16:21:54 1997
disinfecting: /home/virtest/ls
read 25604 bytes
successfully (i hope) disinfected /home/virtest/ls
------------------
It seems to work fine... a diff of this file and the original shows no
changes at all.
BTW, remember that if you're going to play around with this, make a
special user to do it with :)
Jonathan
-----------------------------------------------------------------------------
The Reptile reptile@interport.net
Reptile's Realm http://www.reptile.net
Reptile's Linux Security Page http://www.reptile.net/linux
-----------------------------------------------------------------------------