*

Author Topic: Your Linux system may have an infection  (Read 8316 times)

Offline TechPro

  • Lt. Commander
  • Platinum
  • ****
  • Posts: 1107
  • Where was I?
Your Linux system may have an infection
« on: June 14, 2010, 10:32:29 AM »
Do you use Linux?  Do you use the Unreal IRC server?  If you answer yes to both of those, you may have been pwned.  Read on:

Linux Infection (trojan backdoor actually) in Unreal IRC download

Ed Bott blogs about it

Offline Matthew

  • Platinum
  • ****
  • Posts: 1275
    • Globalgamers.de
Re: Your Linux system may have an infection
« Reply #1 on: June 14, 2010, 05:00:10 PM »
Only linux? How odd. Why wouldn't they infect ALL releases?

Offline karx-elf-erx

  • Gold
  • ***
  • Posts: 383
  • D2X-XL & DLE-XP maintainer
    • D2X-XL and DLE-XP
Re: Your Linux system may have an infection
« Reply #2 on: June 15, 2010, 12:32:46 AM »
You noticed that the trojan can only run with the privileges the IRC process has, didn't you?

Nobody here runs his Linux box as admin by default, or do you?
« Last Edit: June 15, 2010, 01:34:57 PM by karx11erx »

Offline Matthew

  • Platinum
  • ****
  • Posts: 1275
    • Globalgamers.de
Re: Your Linux system may have an infection
« Reply #3 on: June 15, 2010, 07:35:58 PM »
You noticed that the trojan can only run with the privileges the IRC process has, didn't you?

Nobody here runs his Linux box as admin by default, or do you?
I don't use linux, but it's probably on the list of stupid things I'd do... (I do it on windows because I CBA to bother with user accounts and transferring all my shizzle to a new non-admin account, then having to change accounts whenever I wanna change a little setting)

Offline TechPro

  • Lt. Commander
  • Platinum
  • ****
  • Posts: 1107
  • Where was I?
Re: Your Linux system may have an infection
« Reply #4 on: June 15, 2010, 07:46:01 PM »
I don't use linux, but it's probably on the list of stupid things I'd do... (I do it on windows because I CBA to bother with user accounts and transferring all my shizzle to a new non-admin account, then having to change accounts whenever I wanna change a little setting)
Me thinketh you don't have any knowledge on the subject.  Some experience might do you a lot of good, young grasshopper.  ;)

Offline Matthew

  • Platinum
  • ****
  • Posts: 1275
    • Globalgamers.de
Re: Your Linux system may have an infection
« Reply #5 on: June 15, 2010, 08:53:07 PM »
I don't use linux, but it's probably on the list of stupid things I'd do... (I do it on windows because I CBA to bother with user accounts and transferring all my shizzle to a new non-admin account, then having to change accounts whenever I wanna change a little setting)
Me thinketh you don't have any knowledge on the subject.  Some experience might do you a lot of good, young grasshopper.  ;)
On the linux subject or the windows subject? :o

Offline TechPro

  • Lt. Commander
  • Platinum
  • ****
  • Posts: 1107
  • Where was I?
Re: Your Linux system may have an infection
« Reply #6 on: June 16, 2010, 11:03:20 AM »
Linux.  Was our discussion about Windows?

Offline Matthew

  • Platinum
  • ****
  • Posts: 1275
    • Globalgamers.de
Re: Your Linux system may have an infection
« Reply #7 on: June 16, 2010, 12:33:21 PM »
Linux.  Was our discussion about Windows?
Linux. Where could you possibly get the idea I'm new to linux? I still think I understand linux enough to know that running it under admin is stupid. And is also the kind of stupid, lazy thing I'd do.

Offline VANGUARD

  • Platinum
  • ****
  • Posts: 1543
Re: Your Linux system may have an infection
« Reply #8 on: June 17, 2010, 07:41:51 PM »
not really. maybe this game thing or whatever you're talking about is different, but I think it's alot safer on Linux. I've been using Madrake/Mandriva sincve 2006.
Not a single virus. No issues, no crashes.
It's a great system!

Offline Matthew

  • Platinum
  • ****
  • Posts: 1275
    • Globalgamers.de
Re: Your Linux system may have an infection
« Reply #9 on: June 18, 2010, 07:16:31 AM »
Was Karx's comment perhaps sarcasm, then?

Offline -<WillyP>-

  • Lt. Commander
  • Purple Heart
  • ****
  • Posts: 2375
  • I can haz personal text?
    • My photo gallery
Re: Your Linux system may have an infection
« Reply #10 on: June 18, 2010, 07:57:22 AM »
I think Karx meant that the virus needed admin privileges to run.
Smart people look like crazy people to stupid people.

Offline Thomas

  • Gold
  • ***
  • Posts: 167
    • Dateiliste
Re: Your Linux system may have an infection
« Reply #11 on: June 18, 2010, 05:23:33 PM »
You noticed that the trojan can only run with the privileges the IRC process has, didn't you?

Nobody here runs his Linux box as admin by default, or do you?

It seems you believe that makes it less serious. ;)
If you do, you're mistaken.

Offline Matthew

  • Platinum
  • ****
  • Posts: 1275
    • Globalgamers.de
Re: Your Linux system may have an infection
« Reply #12 on: June 18, 2010, 05:41:21 PM »
I think Karx meant that the virus needed admin privileges to run.
And Techpro seems to be implying that everyone runs Linux as admin.

Offline Thomas

  • Gold
  • ***
  • Posts: 167
    • Dateiliste
Re: Your Linux system may have an infection
« Reply #13 on: June 18, 2010, 06:16:27 PM »
I think Karx meant that the virus needed admin privileges to run.
And Techpro seems to be implying that everyone runs Linux as admin.


I've got to tell you that yours as well as WillyP's statement are both wrong and that Karx's comment lacks a minimum of common sense and technical insight.

As far as I can see, Techpro didn't imply anything. There's nothing to imply anyway.

Facts are here:
http://www.securityfocus.com/bid/40820
Anything else is speculation. ;)

Offline Matthew

  • Platinum
  • ****
  • Posts: 1275
    • Globalgamers.de
Re: Your Linux system may have an infection
« Reply #14 on: June 18, 2010, 06:37:18 PM »
I think Karx meant that the virus needed admin privileges to run.
And Techpro seems to be implying that everyone runs Linux as admin.


I've got to tell you that yours as well as WillyP's statement are both wrong and that Karx's comment lacks a minimum of common sense and technical insight.

As far as I can see, Techpro didn't imply anything. There's nothing to imply anyway.

Facts are here:
http://www.securityfocus.com/bid/40820
Anything else is speculation. ;)

Well then techpro is just plain confusing.

 

An Error Has Occurred!

Cannot create references to/from string offsets