Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 28 Jan 2009 18:51:48 -0600
From:      ajtiM <lumiwa@gmail.com>
To:        Glen Barber <glen.j.barber@gmail.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: chkrootkit
Message-ID:  <200901281851.48369.lumiwa@gmail.com>
In-Reply-To: <4ad871310901281430t5fb4f3c7racfc2dc1e1a90350@mail.gmail.com>
References:  <200901281613.43066.lumiwa@gmail.com> <4ad871310901281430t5fb4f3c7racfc2dc1e1a90350@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wednesday 28 January 2009 16:30:54 Glen Barber wrote:
> On Wed, Jan 28, 2009 at 5:13 PM, ajtiM <lumiwa@gmail.com> wrote:
> > Hi!
> >
> >  My system: new installed FreeBSD 7.1, KDE 3.5.10
> >
> >  I ran chkrootkit and I got:
> >
> >  ...
> >  Checking `sshd'... /usr/bin/strings: Warning: '/' is not an ordinary
> > file ...
> >  ...
> >  Searching for t0rn's default files and dirs... nothing found
> >  Searching for t0rn's v8 defaults... Possible t0rn v8 \(or variation\)
> > rootkit installed...
>
> Have you properly updated chrootkit?  If so, it appears you have a
> rootkit on your system.  How old is the installation?

I installed chkrootkit from the ports and I have FreeBSD 7.1  about one week 
and just FreeBSD is on computer. Fresh installation and IMO I visited 
just "safe" web pages. I have a desktop computer, cable Internet. I have 
Skype installed but I didn't use yet.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200901281851.48369.lumiwa>