From owner-freebsd-security@FreeBSD.ORG Fri Aug 22 10:05:23 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1435816A4BF for ; Fri, 22 Aug 2003 10:05:23 -0700 (PDT) Received: from hotmail.com (sea1-dav28.sea1.hotmail.com [207.68.162.85]) by mx1.FreeBSD.org (Postfix) with ESMTP id 912AB43F85 for ; Fri, 22 Aug 2003 10:05:22 -0700 (PDT) (envelope-from kenzo_chin@hotmail.com) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Fri, 22 Aug 2003 10:05:22 -0700 Received: from 209.187.233.158 by sea1-dav28.sea1.hotmail.com with DAV; Fri, 22 Aug 2003 17:05:21 +0000 X-Originating-IP: [209.187.233.158] X-Originating-Email: [kenzo_chin@hotmail.com] From: "Kenzo" To: Date: Fri, 22 Aug 2003 12:05:23 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Message-ID: X-OriginalArrivalTime: 22 Aug 2003 17:05:22.0299 (UTC) FILETIME=[9290D4B0:01C368CF] Subject: rootkit X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Aug 2003 17:05:23 -0000 I ran chkrootkit and this is what I got. should I worry or is this normal? I'm running 4.8 thanks. Checking `wted'... 3 deletion(s) between Sat Jun 26 18:10:21 2027 and Sun Mar 24 04:27:12 2024 4 deletion(s) between Sun Mar 24 04:27:12 2024 and Sun Mar 24 04:27:12 2024 5 deletion(s) between Sun Mar 24 04:27:12 2024 and Sun Mar 24 04:27:12 2024 1 deletion(s) between Sun Mar 24 04:27:12 2024 and Sun Mar 24 04:27:12 2024 1 deletion(s) between Sun Mar 24 04:27:12 2024 and Sun Mar 24 04:27:12 2024 2 deletion(s) between Sun Mar 24 04:27:12 2024 and Sun Mar 24 04:27:12 2024 5 deletion(s) between Sun Mar 24 04:27:12 2024 and Sun Mar 24 04:27:12 2024 8 deletion(s) between Sun Mar 24 04:27:12 2024 and Sun Mar 24 04:27:12 2024 7 deletion(s) between Sun Mar 24 04:27:12 2024 and Sun Mar 24 04:27:12 2024 1 deletion(s) between Sun Mar 24 04:27:12 2024 and Fri Jan 19 14:33:04 1996 6 deletion(s) between Fri Jan 19 14:33:04 1996 and Sun Mar 24 04:27:12 2024 6 deletion(s) between Sun Mar 24 04:27:12 2024 and Sun Mar 24 04:27:12 2024 2 deletion(s) between Sun Mar 24 04:27:12 2024 and Sun Mar 24 04:27:12 2024 nothing deleted Checking `w55808'... not infected Checking `scalper'... not infected Checking `slapper'... not infected Checking `z2'... wtmp entry may be corrupted nothing deleted