From owner-freebsd-bugbusters@FreeBSD.ORG  Sun Apr  9 18:46:29 2006
Return-Path: <owner-freebsd-bugbusters@FreeBSD.ORG>
X-Original-To: bugbusters@FreeBSD.org
Delivered-To: freebsd-bugbusters@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 1C1C816A401
	for <bugbusters@FreeBSD.org>; Sun,  9 Apr 2006 18:46:29 +0000 (UTC)
	(envelope-from ceri@submonkey.net)
Received: from shrike.submonkey.net (cpc2-cdif2-0-0-cust107.cdif.cable.ntl.com
	[81.104.168.108])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A01D443D4C
	for <bugbusters@FreeBSD.org>; Sun,  9 Apr 2006 18:46:28 +0000 (GMT)
	(envelope-from ceri@submonkey.net)
Received: from ceri by shrike.submonkey.net with local (Exim 4.61 (FreeBSD))
	(envelope-from <ceri@submonkey.net>)
	id 1FSeva-0000ic-LF; Sun, 09 Apr 2006 19:46:26 +0100
Date: Sun, 9 Apr 2006 19:46:26 +0100
From: Ceri Davies <ceri@submonkey.net>
To: Vitaliy K <vitaliy@vox.com.ua>
Message-ID: <20060409184626.GG84768@submonkey.net>
Mail-Followup-To: Ceri Davies <ceri@submonkey.net>,
	Vitaliy K <vitaliy@vox.com.ua>, bugbusters@FreeBSD.org
References: <131186304.20060409171103@vox.com.ua>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="FUaywKC54iCcLzqT"
Content-Disposition: inline
In-Reply-To: <131186304.20060409171103@vox.com.ua>
X-PGP: finger ceri@FreeBSD.org
User-Agent: Mutt/1.5.11
Sender: Ceri Davies <ceri@submonkey.net>
Cc: bugbusters@FreeBSD.org
Subject: Re: chkrootkit
X-BeenThere: freebsd-bugbusters@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Coordination of the Problem Report handling effort."
	<freebsd-bugbusters.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugbusters>, 
	<mailto:freebsd-bugbusters-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-bugbusters>
List-Post: <mailto:freebsd-bugbusters@freebsd.org>
List-Help: <mailto:freebsd-bugbusters-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugbusters>, 
	<mailto:freebsd-bugbusters-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 09 Apr 2006 18:46:29 -0000


--FUaywKC54iCcLzqT
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Apr 09, 2006 at 05:11:03PM +0300, Vitaliy K wrote:
> ??, bugbusters!
>=20
> I badly know english, beforehand I apologize for the illiteracy.
>=20
> I ask the help you in the decision of my problem.
>=20
> I   have   loaded   program   stock-takings   rootkit   from   a  site
> http://www.chkrootkit.org/.
>=20
> Has  started,  and  has received below resulted result. I am disturbed
> with a line   Checking `date'... INFECTED

chkrootkit has historically given false positives on FreeBSD.  Whether
this is still the case or not, I wouldn't like to say.

> Has  come  home, has put same FreeBSD on a domestic computer, the same
> report,   Checking `date'... INFECTED
>=20
> How to me to be? It is a mistake of developers of the program or yours?

I can't think of how this could possibly be our fault.

Ceri
--=20
That must be wonderful!  I don't understand it at all.
                                                  -- Moliere

--FUaywKC54iCcLzqT
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (FreeBSD)

iD8DBQFEOVaCocfcwTS3JF8RAnJLAKCzetP7hIELrFhObI3xxTomJBPDKgCfXMks
JUtMEqAGVoFG6HIUmjSjnpQ=
=KMHE
-----END PGP SIGNATURE-----

--FUaywKC54iCcLzqT--