From owner-freebsd-questions@FreeBSD.ORG  Thu Jun 26 02:13:01 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 938AB37B401
	for <freebsd-questions@freebsd.org>;
	Thu, 26 Jun 2003 02:13:01 -0700 (PDT)
Received: from man-97-187.ResHall.Berkeley.EDU
	(man-97-187.Reshall.Berkeley.EDU [169.229.97.187])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9F00A43FE1
	for <freebsd-questions@freebsd.org>;
	Thu, 26 Jun 2003 02:12:58 -0700 (PDT)
	(envelope-from lou@man-97-187.ResHall.Berkeley.EDU)
Received: from man-97-187.ResHall.Berkeley.EDU (localhost [127.0.0.1])
	h5Q9Ej5m053849;	Thu, 26 Jun 2003 02:14:45 -0700 (PDT)
	(envelope-from lou@man-97-187.ResHall.Berkeley.EDU)
Received: from localhost (lou@localhost)id h5Q9Ejqh053846;
	Thu, 26 Jun 2003 02:14:45 -0700 (PDT)
Date: Thu, 26 Jun 2003 02:14:45 -0700 (PDT)
From: Tak Pui LOU <lou@man-97-187.ResHall.Berkeley.EDU>
To: Kris Kennaway <kris@obsecurity.org>
In-Reply-To: <20030626090259.GA45099@rot13.obsecurity.org>
Message-ID: <20030626020702.M50913@man-97-187.ResHall.Berkeley.EDU>
References: <20030626015929.D53744@man-97-187.ResHall.Berkeley.EDU>
 <20030626090259.GA45099@rot13.obsecurity.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: freebsd-questions@freebsd.org
Subject: Re: chkrootkit version 0.41 results on FBSD 5.1R#0
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jun 2003 09:13:01 -0000

I read about this before. But, I just updated the port source tree and did
a portupgrade. These programs are still listed as INFECTED. So, my
question should be if these have been fixed or someone is really messing
with my system.

---
Lou

On Thu, 26 Jun 2003, Kris Kennaway wrote:

> On Thu, Jun 26, 2003 at 02:02:19AM -0700, Tak Pui LOU wrote:
> > I have the following listed as INFECTED:
> >
> > Checking `chfn'... INFECTED
> > Checking `chsh'... INFECTED
> > Checking `date'... INFECTED
> > Checking `ls'... INFECTED
> > Checking `ps'... INFECTED
> >
> > Does anyone have the same output?
>
> FAQ..please consult the archives.
>
> Kris
>