"Harley, Ageless Wings" wrote:

Rick...

Thanks Harley for the tip. I checked, the box and me are disease free.<<

         Your welcome!

And, Paul....

I did a little search around the McAfee virus library, and found the
following:

DoS.Linux.Blitz (AVP)
Linux.Ramen
Linux/Fork
Linux/Lion.worm
Linux/Rootkit
Linux/Snoopy.b
Linux/Adore.worm
Linux/Lindose

This is a partial list of currently active Linux viruses/worms/trojans. Note
that they are all considered low risk, but probably because there are fewer
Linux systems out there than Windows. Also note that someone has found a way
to get around the root access limitations, and at least one of the above can
create full root access rights for itself.

The web site where you can access the information about them is here:

http://vil.mcafee.com/alphar.asp

Type "Linux" in the search window to get the list. Then select each one in
the list to see all the data on it including how to recognize it, and what
to do about it.

There were several that may have been of interest to you, specifically this
one (includes the link to the Red Hat page to get the fix to prevent it):
=========================================================
exploit is used against Redhat installations, an exploit of the print
spooler service LPRng. This service also contains a supported function
called syslog() which can be exploited to gain root access. Patch
availability is found at this link.
http://www.redhat.com/support/errata/RHSA-2000-065-06.html
==========================================================

And excerpts from the descriptions of a couple of others that may be of
interest:

==========================================================
This first one (Linux.Ramen.Worm) gets it's name because it puts a picture
of a bag of
Ramen Noodles on the screen!

This worm will gain root access to Linux web servers using at least one
known vulnerability. Once root access is granted, the worm will extract
itself to the host and through the use of Elf binaries and shell scripts,
will run instructions to seek available servers across the Internet.
==================================================

"Linux/Fork" is not a real virus but a trojan which has to be deleted.
The file is in true Linux ELF binary file format. The trojan is a so-called
denial of service attack file...It's going "resident" by adding a thread.
Systems might become very slow and/or unstable. It might also interfere with
regular program file execution, intercepting the call. For example, the
internal debugging program "gdb" didn't quite work well once linux/fork was
active.
====================================================
At least one of the viruses, which apparently hasn't been found in the
"wild" yet,  can infect either Linux or Windows systems. (W32/Lindose)
                             _
        Harley Dixon          \
------------------------------ \    |
 --- www.AgelessWings.com --- I<=====>
------------------------------ /    |
                             _/

Thanks Harley. Are any of these cross platform? If a virus runs on Linux
can it propagate to a Windows machine and vice versa? Perish the thought!

Paul Lamar

The AirCraft Rotary Engine NewsLetter.              Powered by Linux.
ACRE NL web site.
http://home.earthlink.net/~rotaryeng/            http://www.linux.org