Date: Sun, 9 Apr 2006 19:46:26 +0100 From: Ceri Davies <ceri@submonkey.net> To: Vitaliy K <vitaliy@vox.com.ua> Cc: bugbusters@FreeBSD.org Subject: Re: chkrootkit Message-ID: <20060409184626.GG84768@submonkey.net> In-Reply-To: <131186304.20060409171103@vox.com.ua> References: <131186304.20060409171103@vox.com.ua>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] On Sun, Apr 09, 2006 at 05:11:03PM +0300, Vitaliy K wrote: > ??, bugbusters! > > I badly know english, beforehand I apologize for the illiteracy. > > I ask the help you in the decision of my problem. > > I have loaded program stock-takings rootkit from a site > http://www.chkrootkit.org/. > > Has started, and has received below resulted result. I am disturbed > with a line Checking `date'... INFECTED chkrootkit has historically given false positives on FreeBSD. Whether this is still the case or not, I wouldn't like to say. > Has come home, has put same FreeBSD on a domestic computer, the same > report, Checking `date'... INFECTED > > How to me to be? It is a mistake of developers of the program or yours? I can't think of how this could possibly be our fault. Ceri -- That must be wonderful! I don't understand it at all. -- Moliere [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (FreeBSD) iD8DBQFEOVaCocfcwTS3JF8RAnJLAKCzetP7hIELrFhObI3xxTomJBPDKgCfXMks JUtMEqAGVoFG6HIUmjSjnpQ= =KMHE -----END PGP SIGNATURE-----help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060409184626.GG84768>