Re: cracked? "rm uses obsolete (PF_INET,SOCK_PACKET)"

["shrek-m@gmx.de" <shrek-m@gmx.de>]

Fuska schrieb:

>>rm uses obsolete (PF_INET,SOCK_PACKET)
>>...
>>eth0: Setting promiscuous mode
>>ppp0: Setting promiscuous mode
>>...
>>
>>I found some stuff in /dev, hdx1 and hdx2 .... is that normal?
>>
>
>
>   No, that isn't normal. It seems that you have been infected whith 
the rstb
> virus. It infects all executable files under /bin/ directory and 
under the
> directory from which the infected file has been launched. Seach for
> rstb_cleaner, whith this tool you can clean the infected files.



http://www.sophos.com/virusinfo/analyses/linuxrstb.html