Date: Thu, 20 Feb 2003 22:19:53 -0500 From: "Matthew Emmerton" <matt@gsicomp.on.ca> To: "Silent Secrets" <silent_secrets@yahoo.com>, <freebsd-questions@FreeBSD.ORG> Subject: Re: Root Kits? Message-ID: <003401c2d958$1a8c31a0$1200a8c0@gsicomp.on.ca> References: <20030221030548.74409.qmail@web41114.mail.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> We've done a freash installation of FreeBSD 5.0 on our > system, downloaded a root kit checker from > www.chkrootkit.com & found that a few things were > infected. The files include chfn, chsh, date, ls, and > ps. We made sure the system was compleatly isolated by > installing from the cd's & burning the root kit checker > to cd & installing it from there. > > If you could let me know if this is an error on the root > kit checker or something else is causing it to look > infected, that'd be great. It doesn't support FreeBSD 5.0 yet. From http://www.chkrootkit.com/: chkrootkit has been tested on: Linux 2.0.x, 2.2.x and 2.4.x, FreeBSD 2.2.x, 3.x and 4.x, OpenBSD 2.6, 2.7, 2.8, 2.9, 3.0, 3.1 and 3.2, NetBSD 1.5.2 and Solaris 2.5.1, 2.6 and 8.0. -- Matt Emmerton To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?003401c2d958$1a8c31a0$1200a8c0>