Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 28 Jan 2009 17:30:54 -0500
From:      Glen Barber <glen.j.barber@gmail.com>
To:        ajtiM <lumiwa@gmail.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: chkrootkit
Message-ID:  <4ad871310901281430t5fb4f3c7racfc2dc1e1a90350@mail.gmail.com>
In-Reply-To: <200901281613.43066.lumiwa@gmail.com>
References:  <200901281613.43066.lumiwa@gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Jan 28, 2009 at 5:13 PM, ajtiM <lumiwa@gmail.com> wrote:
> Hi!
>
>  My system: new installed FreeBSD 7.1, KDE 3.5.10
>
>  I ran chkrootkit and I got:
>
>  ...
>  Checking `sshd'... /usr/bin/strings: Warning: '/' is not an ordinary file
>  ...
>  ...
>  Searching for t0rn's default files and dirs... nothing found
>  Searching for t0rn's v8 defaults... Possible t0rn v8 \(or variation\) rootkit
> installed...
>

Have you properly updated chrootkit?  If so, it appears you have a
rootkit on your system.  How old is the installation?


-- 
Glen Barber



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4ad871310901281430t5fb4f3c7racfc2dc1e1a90350>