Re: Output from chkrootkit

From: lorenzodes (lorenzodes.removeme_at_iol.it)
Date: 06/12/05 

Date: Sun, 12 Jun 2005 14:49:26 +0200

Peter Chant wrote on date 10/06/2005 19.11:
> Ransom wrote:
>
>
>
>>>/usr/lib/php/.registry /usr/lib/qt-3.3.3/examples/toplevel/.ui
>>>/usr/lib/qt-3.3.3/examples/helpdemo/.ui INFECTED (PORTS: 600)
>
>
>>Chkrootkit found something suspicious
>>in /usr/lib/qt-3.3.3/examples/helpdemo/.ui accessing port 600
>>which is strange because this should be an empty directory.
>>

>
> Directory .ui is listed as empty.
>

Try this:
# cd /usr/lib/qt-3.3.3/examples/helpdemo
# echo .ui/.* .ui/*

Paste the output here. 

-- 
Formerly known as Loric
Quantcast