TR/HackToolX.RK.1 and TR/Classloader.C viruses picked up by Virex

fs frank at insightcomputer.com
Mon Dec 15 14:47:07 UTC 2003


Powerful Trojans are going around that brought down my kernel 2.4.22 
last night.  I first noticed the system was very sluggish and I could 
not longer use Nautilus.  Then my email inbox stopped working.  Then 
cups.  One virus is java related.

I quickly ran my Vexira --update and did a full scan.
/usr/share/locale/fr/LC_MESSAGES/net-tools.mo
 Date: 25.08.2003  Time: 11:15:24  Size: 40920
 ALERT: [TR/HackToolX.RK.1 virus] 
/usr/share/locale/fr/LC_MESSAGES/net-tools.mo <<< The Trojan horse 
TR/HackToolX.RK.1
                                                                                

/usr/share/locale/pt_BR/LC_MESSAGES/net-tools.mo
 Date: 25.08.2003  Time: 11:15:24  Size: 48498
 ALERT: [TR/HackToolX.RK.1 virus] 
/usr/share/locale/pt_BR/LC_MESSAGES/net-tools. mo <<< The Trojan horse 
TR/HackToolX.RK.1
                                                                                

\ /usr/lib/mozilla-1.4.1/chrome/lang/lang-pt-BR.jar.txt \ 
/usr/lib/mozilla-1.4.1/chrome/lang/lang-zh-CN-unix.jar.txt 
/home/fs/.java/deployment/cache/javapi/v1.0/jar/WebCounter.jar-53ebf3b-6321a0e0. 
zip
 Date: 30.11.2003  Time: 10:14:07  Size: 32905
 ALERT: [TR/Classloader.C virus] 
/home/fs/.java/deployment/cache/javapi/v1.0/jar 
/WebCounter.jar-53ebf3b-6321a0e0.zip <<< The Trojan horse TR/Classloader.C

Vexira repaired none of these, just gave me alerts.

Sending this email after system clean load.  All users should be on alert.

F.S.







More information about the fedora-list mailing list