chkrootkit - suspicious files question

Gene Heskett gene.heskett at verizon.net
Sun Apr 3 16:37:47 UTC 2005


On Sunday 03 April 2005 08:42, Jim Cornette wrote:
>Since there was discussions regarding rootkits and how they are
> getting into systems, I ran chkrootkit and am more concerned about
> the suspicious files that it referred to.
>
>Searching for suspicious files and dirs, it may take a while...
>/usr/lib/perl5/5.8.6/i386-linux-thread-multi/.packlist
>/usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi/auto/NKF/.p
>acklist
> /usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi/auto/mod_p
>erl/.packlist
>
>/usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi/auto/Gaim/.
>packlist
>
>/usr/lib/perl5/site_perl/5.8.6/i386-linux-thread-multi/auto/DCOP/.pa
>cklist
>
>
>Hopefully this does not indicate anything to be alarmed about. Is
> this a rational assumption?
>
>Jim

I don't think these are Jim.  But do pay attention to the names a 
level or so back up the tree, I suppose there could be a surprise 
there.
>
>--
>QUESTION AUTHORITY.
>
>(Sez who?)
:)
-- 
Cheers, Gene
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
99.34% setiathome rank, not too shabby for a WV hillbilly
Yahoo.com and AOL/TW attorneys please note, additions to the above
message by Gene Heskett are:
Copyright 2005 by Maurice Eugene Heskett, all rights reserved.




More information about the fedora-list mailing list