ethtool trojan detected by NAI

Leonard den Ottolander leonard at den.ottolander.nl
Thu Jan 15 17:42:30 UTC 2004


Hi Andy, Jason,

> [agreen at fastcat agreen]$ md5sum /sbin/ethtool
> febe7cd9294fc766dfa4126298b9f7ec  /sbin/ethtool

I just remember I've recently seen the issue of md5summing prelinked
binaries being mentioned in one of the threads on this list. That could
explain the discrepancy between the two md5sums.

> - -rwxr-xr-x    1 root     root        83684 Sep  5 21:14 /sbin/ethtool

Same size here (and GMT-ed date).

Bye,
Leonard.






More information about the fedora-list mailing list