Re: dt_ssh5

[Henri Salo <henri@nerv.fi>]

On Wed, 04 Nov 2009 09:30:35 -0500
Bernie Dolan <bd3@dolanlane.net> wrote:

> Hi,
> I recently became aware of the executable:
>     dt_ssh5
> in my /tmp subdirectory.
> 
> Seems this is a botnet that is trying brute force attacks from my
> server.  Has anybody else seen this?
> 
> Thanks for the prompt response.
> 
> 
> -  
> When a machine begins to run without human aid, it is time to scrap
> it - whether it be a factory or a government.  ~Alexander Chase

Yes, for example grumpy bsd guy as you can see from:
<http://bsdly.blogspot.com/2009/10/third-time-uncharmed.html>. Could
you email me the file, thanks?

---
Henri Salo