Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 9 Apr 2006 19:46:26 +0100
From:      Ceri Davies <ceri@submonkey.net>
To:        Vitaliy K <vitaliy@vox.com.ua>
Cc:        bugbusters@FreeBSD.org
Subject:   Re: chkrootkit
Message-ID:  <20060409184626.GG84768@submonkey.net>
In-Reply-To: <131186304.20060409171103@vox.com.ua>
References:  <131186304.20060409171103@vox.com.ua>

next in thread | previous in thread | raw e-mail | index | archive | help

--FUaywKC54iCcLzqT
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Apr 09, 2006 at 05:11:03PM +0300, Vitaliy K wrote:
> ??, bugbusters!
>=20
> I badly know english, beforehand I apologize for the illiteracy.
>=20
> I ask the help you in the decision of my problem.
>=20
> I   have   loaded   program   stock-takings   rootkit   from   a  site
> http://www.chkrootkit.org/.
>=20
> Has  started,  and  has received below resulted result. I am disturbed
> with a line   Checking `date'... INFECTED

chkrootkit has historically given false positives on FreeBSD.  Whether
this is still the case or not, I wouldn't like to say.

> Has  come  home, has put same FreeBSD on a domestic computer, the same
> report,   Checking `date'... INFECTED
>=20
> How to me to be? It is a mistake of developers of the program or yours?

I can't think of how this could possibly be our fault.

Ceri
--=20
That must be wonderful!  I don't understand it at all.
                                                  -- Moliere

--FUaywKC54iCcLzqT
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (FreeBSD)

iD8DBQFEOVaCocfcwTS3JF8RAnJLAKCzetP7hIELrFhObI3xxTomJBPDKgCfXMks
JUtMEqAGVoFG6HIUmjSjnpQ=
=KMHE
-----END PGP SIGNATURE-----

--FUaywKC54iCcLzqT--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060409184626.GG84768>