Re: Output from chkrootkit
From: Gordon Darling (me_at_privacy.net)
Date: Fri, 10 Jun 2005 13:34:33 +0100
On Fri, 10 Jun 2005 10:52:52 +0200, Ransom wrote:
> Peter Chant wrote:
>> I'm running chkrootkit 0.45 on Slackware 10.1. Can anyone enlighten me
>> to what this means?
>> /usr/lib/php/.registry /usr/lib/qt-3.3.3/examples/toplevel/.ui
>> /usr/lib/qt-3.3.3/examples/helpdemo/.ui INFECTED (PORTS: 600)
> Chkrootkit found something suspicious in
> /usr/lib/qt-3.3.3/examples/helpdemo/.ui accessing port 600 which is
> strange because this should be an empty directory.
> FYI: I also use slack 10.1 with qt installed and chkrootkit 0.45 and I
> don't get this warning, so probably you really have problem.