ethtool trojan detected by NAI

[Leonard den Ottolander]

Hi,

I wrote:

> I just remember I've recently seen the issue of md5summing prelinked
> binaries being mentioned in one of the threads on this list. That could
> explain the discrepancy between the two md5sums.

According to the thread "Executables and md5 checksum." exchangable
checksums should be generated like this:

$ /usr/sbin/prelink -N --verify --md5 /sbin/ethtool
664b71f93f11aac80957f19273288f01  /sbin/ethtool

Bye,
Leonard.