chkrootkit - suspicious files question

Jim Cornette fc-cornette at insight.rr.com
Sun Apr 3 12:42:53 UTC 2005


Since there was discussions regarding rootkits and how they are getting
into systems, I ran chkrootkit and am more concerned about the
suspicious files that it referred to.

Searching for suspicious files and dirs, it may take a while...
/usr/lib/perl5/5.8.6/i386-linux-thread-multi/.packlist
/usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi/auto/NKF/.packlist
/usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi/auto/mod_perl/.packlist 

/usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi/auto/Gaim/.packlist 

/usr/lib/perl5/site_perl/5.8.6/i386-linux-thread-multi/auto/DCOP/.packlist


Hopefully this does not indicate anything to be alarmed about. Is this a
rational assumption?

Jim

-- 
QUESTION AUTHORITY.

(Sez who?)




More information about the fedora-list mailing list