RE: [cobalt-users] Hacked or Virus??

[Mike At Spy <spycobalt@xxxxxxxxxxxxxxxxxx>]

> >
> > Before you get your panties in a bigger bunch.
> >
> > 1) where are they located?  Specific directories would help.
> >
> > 2) Do you secure your box?
> >
> > 3) Run the chkrootkit (www.chkrootkit.org).  It will assist on telling
> > you if you have been compromised.
> >
> > 4) Did you cat the contents of the file?
> >
>
>
> I just ran this after reading this post - very nice program! :)
>
> I did get one possibly odd (or not) line.   After "Searching for
> suspicious
> files and dirs, it may take a while..." it listed some directories and
> files - mostly with a file called .packlist in them.  The program did not
> comment, unless it was just trying to call my attention to 'suspicious
> files'.  Anyone know if these .packlist are a concern?
>
> Thanks,
>
> -Mike


To answer my own question (should've been reading before writing) -
apparently these are 'false positives', though not absolutely.
Unfortunately, I don't know enough to be able to distinguish between a real
positive and false one.  :\

-Mike