The Register follows up on reports of the Adore worm. "The worm replaces an Internet service, known as ICMP (Internet Control Message
Protocol), with a version containing a back door feature that allows a hacker
access to systems whenever a properly formatted command sequence is received
over the Internet. Adore also attempt to send sensitive system information to four
different email addresses."
April 5, 2001