From owner-freebsd-questions@FreeBSD.ORG Sun Apr 18 21:12:14 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 46CF916A4CE for ; Sun, 18 Apr 2004 21:12:14 -0700 (PDT) Received: from ms-smtp-03-eri0.ohiordc.rr.com (ms-smtp-03-smtplb.ohiordc.rr.com [65.24.5.137]) by mx1.FreeBSD.org (Postfix) with ESMTP id 85CBE43D46 for ; Sun, 18 Apr 2004 21:12:13 -0700 (PDT) (envelope-from dmehler26@woh.rr.com) Received: from satellite (dhcp065-031-041-029.woh.rr.com [65.31.41.29]) i3J4CB2w027710 for ; Mon, 19 Apr 2004 00:12:11 -0400 (EDT) Message-ID: <000701c425c4$06f34340$0200a8c0@satellite> From: "dave" To: Date: Mon, 19 Apr 2004 00:08:52 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 X-Virus-Scanned: Symantec AntiVirus Scan Engine Subject: chkrootkit reports infected date X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Apr 2004 04:12:14 -0000 Hello, I just ran chkrootkit -n -q on a 5.2.1 box, and it showed date as being infected, but nothing else, no worms, and it didn't say with what. Given my last experience i would appreciate any suggestions as to how to identify this anomaly and stop it. Thanks. Dave.