[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] Another Raq3 Hack



+In a message dated 2/15/01 12:31:19 AM Eastern Standard Time, 
+isplists@xxxxxxxxxxxx writes:
+
+<< Raq3 with all Patches:
+  Ran Chkrootkit and got 
+  Checking `netstat'... INFECTED
+  in.smb was enabled in inetd.conf
+  Both init and in.smb in /usr/sbin had the same time stamp.
+ <<
+
+where do I find Chkrootkit?

chkrootkit
by Nelson Murilo, nelson@xxxxxxxxxxxxxx

This program locally checks for signs of a rootkit.
chkrootkit is available at: http://www.chkrootkit.org/