Blackhole

Chris Kenward kenwardc at tgis.co.uk
Mon Apr 11 16:11:54 UTC 2005


Hey Mike

> Here is a well know project that may help to evaluate your system:
> http://freshmeat.net/projects/chkrootkit/

Searching for suspicious files and dirs, it may take a while...
/usr/lib/perl5/5.8.0/i386-linux-thread-multi/.packlist

Checking `sniffer'... not tested: can't exec ./ifpromisc
Checking `wted'... not tested: can't exec ./chkwtmp
Checking `z2'... not tested: can't exec ./chklastlog
Checking `chkutmp'... not tested: can't exec ./chkutmp

Apart from a long long list of things "not infected" or "not found" the
lines above were the only ones which caught my eye. Does this look
suspicious?

Regards
Chris





More information about the redhat-list mailing list