Date: 13 Apr 2003 16:53:00 +0300 From: Alexandru Balan <Alexandru.Balan@iNES.RO> To: freebsd-security@freebsd.org Subject: chfn, chsh, ls, ps - INFECTED Message-ID: <1050241980.32076.26.camel@BSD.iNES.RO>
next in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] My machine got hacked a few days ago through the samba bug. I reinstalled everything cvsuped src-all, and ran chkrootkit. No more LKM but still... Can anyone please advise ? bash-2.05b# chkrootkit | grep INFECTED Checking `chfn'... INFECTED Checking `chsh'... INFECTED Checking `date'... INFECTED Checking `ls'... INFECTED Checking `ps'... INFECTED -- Jay [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (FreeBSD) iD8DBQA+mWu8Xj/84bdgpDIRAp1BAJwOmaWGSfWsS21QHTLYXTy38lGdngCghqve bV+S6DYKv2AGKqb0EB2Nu1c= =wyJ/ -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1050241980.32076.26.camel>