Nå har også loveletter-viruset kommet i en unix-variant, dog med meget
begrensede muligheter på grunn av sikkerheten de fleste *nix systemene har
i forhold til windows.
Klipp fra http://www.norman.no/virus_info/vbs_loveletter.shtml
UNIX/LoveLetter.A
This is the original LoveLetter.A email worm, rewritten to function in a
UNIX environment.
It contains of a so-called shell script which, when executed, will email
itself to all addresses found in the files “.muttrc” and “.mailrc”, as
well as user names picked from the local password file etc/passwd.
It uses the UNIX standard mail program mailx to do this.
Subject: ”I LOVE YOU”
Body: (No text in body.)
File “Loveletter.sh” attached.
This virus is also started at every login, as the virus file name is
inserted into the Bourne Again Shell startup file “.bashrc”.
This variant is equally destructive as the original VBS version. It will
attempt to flat out delete graphical files of types *.JPG, *.JPEG, *.MPG
and *.GIF, but will not overwrite them with the virus body, as is the case
with the original.
Note that as of 7 May 2000 1600 CET, this variant has not been found in
the wild, and will probably have a limited spread potential due to
compatibility issue
>>>>>>>>>>>>
Ingen er derfor helt sikre mot virus, selv om dette shellscriptet vil ha
svært begrensede muligheter for spredning med det store utvalget av linux
og unix-versjoner ute på markedet med en kaskade av mer eller mindre
kompatible shell for forskjellige formål.
Brukere av *nix systemer bør uansett følge en del forhåndsregler på lik
linje med andre systemer som f.eks. å kun bruke root-kontoen til
administrasjon av systemet, og heller opprette en egen konto for epost,
x, irc osv.
-------------------------------------------------------
Magne Haagen Flatval http://www.flatval.net/
Postboks 457 sentrum magne@flatval.net
7404 TRONDHEIM Mob: +47 93 02 49 73
-------------------------------------------------------
Support the boycott against Amazon.com's web patents!
http://www.nowebpatents.org/
This archive was generated by hypermail 2b29 : Thu Aug 03 2000 - 10:25:39 MET DST