Re: Output from chkrootkit

From: Gordon Darling (me_at_privacy.net)
Date: 06/10/05


Date: Fri, 10 Jun 2005 13:34:33 +0100

On Fri, 10 Jun 2005 10:52:52 +0200, Ransom wrote:

> Peter Chant wrote:
>
>> I'm running chkrootkit 0.45 on Slackware 10.1. Can anyone enlighten me
>> to what this means?
>>
>> /usr/lib/php/.registry /usr/lib/qt-3.3.3/examples/toplevel/.ui
>> /usr/lib/qt-3.3.3/examples/helpdemo/.ui INFECTED (PORTS:  600)
>>
>>
>> Pete
>
> Chkrootkit found something suspicious in
> /usr/lib/qt-3.3.3/examples/helpdemo/.ui accessing port 600 which is
> strange because this should be an empty directory.
>
> FYI: I also use slack 10.1 with qt installed and chkrootkit 0.45 and I
> don't get this warning, so probably you really have problem.

Sadmind ??

http://www.sophos.com/virusinfo/analyses/unixsadmind.html

Regards
Gordon