Re: Output from chkrootkit

From: Gordon Darling (me_at_privacy.net)
Date: 06/10/05


Date: Fri, 10 Jun 2005 13:34:33 +0100

On Fri, 10 Jun 2005 10:52:52 +0200, Ransom wrote:

> Peter Chant wrote:
>
>> I'm running chkrootkit 0.45 on Slackware 10.1. Can anyone enlighten me
>> to what this means?
>>
>> /usr/lib/php/.registry /usr/lib/qt-3.3.3/examples/toplevel/.ui
>> /usr/lib/qt-3.3.3/examples/helpdemo/.ui INFECTED (PORTS:  600)
>>
>>
>> Pete
>
> Chkrootkit found something suspicious in
> /usr/lib/qt-3.3.3/examples/helpdemo/.ui accessing port 600 which is
> strange because this should be an empty directory.
>
> FYI: I also use slack 10.1 with qt installed and chkrootkit 0.45 and I
> don't get this warning, so probably you really have problem.

Sadmind ??

http://www.sophos.com/virusinfo/analyses/unixsadmind.html

Regards
Gordon



Relevant Pages

  • Re: Output from chkrootkit
    ... >> Chkrootkit found something suspicious in ... >> strange because this should be an empty directory. ... >> don't get this warning, so probably you really have problem. ...
    (comp.os.linux.security)
  • Re: Output from chkrootkit
    ... which is strange because this should be an empty directory. ... I also use slack 10.1 with qt installed and chkrootkit 0.45 ...
    (comp.os.linux.security)
  • Re: Output from chkrootkit
    ... > Ransom wrote: ... >>Chkrootkit found something suspicious ... >>which is strange because this should be an empty directory. ...
    (comp.os.linux.security)
  • Re: Output from chkrootkit
    ... > Chkrootkit found something suspicious ... > which is strange because this should be an empty directory. ... Hmm ...
    (comp.os.linux.security)
  • Mdk10 Official false chkrootkit alarm?
    ... Just today a chkrootkit warning came to my attention: ... "Searching for Showtee... ...
    (comp.os.linux.security)