Re: /usr/local/sbin/chkrootkit - INFECTED

From: Thomas Wloka <prof(at)uni-halver.de>
Date: Fri, 02 Jul 2004 15:04:37 +0200

Hi,

irgendwie scheint chkrootkit wirklich kaputt zu sein:

--- CUT ---

ROOTDIR is `/'
Checking `amd'... not infected
Checking `basename'... not infected
Checking `biff'... not infected
Checking `chfn'... not infected
Checking `chsh'... not infected
Checking `cron'... not infected
Checking `date'... INFECTED
Checking `du'... not infected
Checking `dirname'... not infected

--- CUT ENDE ---

5.2.1-RELEASE-p3

MD5 (/bin/date) = bf30657cf4521bc63152aba0c04124bc
-r-xr-xr-x 1 root wheel 14776 Mar 30 09:17 /bin/date

Und das ganze auf einem anderen System:

5.2.1-RELEASE-p8

MD5 (/bin/date) = bf30657cf4521bc63152aba0c04124bc
-r-xr-xr-x 1 root wheel 14776 Jun 21 06:18 /bin/date

Und noch ein System:

5.2.1-RELEASE-p5

MD5 (/bin/date) = 6cf868c940e1088b05c9e7433b316eaa
-r-xr-xr-x 1 root wheel 14776 Apr 26 13:05 /bin/date*

-- 
Thomas Wloka			http://www.uni-halver.de/
@home: prof(at)uni-halver.de	@Webmaster: prof(at)uni-halver.de
@work: wloka(at)multimediahaus.de	ICQ: 22985103
To Unsubscribe: send mail to majordomo(at)de.FreeBSD.org
with "unsubscribe de-bsd-questions" in the body of the message
Received on Fri 02 Jul 2004 - 15:05:55 CEST

search this site