Date: Sun, 2 May 2004 07:37:53 +0200 From: Zoran Kolic <kolicz@eunet.yu> To: freebsd-security@freebsd.org Subject: Re: chkrootkit and 4.10-prerelease issues? Message-ID: <20040502053753.GA624@kolic.net> In-Reply-To: <20040501190057.E062D16A4DA@hub.freebsd.org> References: <20040501190057.E062D16A4DA@hub.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
> Has anyone else seen chkrootkit (version 0.43) on 4.10-prerelease or
> later report chfn, chsh, and date as infected?
> Is this similar to the 5.x issues with chkrootkit?
Almost always. Mostly "date",
but sometimes "ps", "ls"...
First time I was scared to
death.
Nice little app with own
secret life.
ZK
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040502053753.GA624>