chkrootkit reports infected date

freebsduser at comcast.net freebsduser at comcast.net
Sun Apr 18 21:39:23 PDT 2004


> Hello,
>     I just ran chkrootkit -n -q on a 5.2.1 box, and it showed date as being
> infected, but nothing else, no worms, and it didn't say with what. Given my
> last experience i would appreciate any suggestions as to how to identify
> this anomaly and stop it.
> Thanks.
> Dave.
> 
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
Hey there,

If you want to put yourself at ease fet the source for date and compile it. After it's compiled try again. I searched google groups and it seems you may be getting what they call a false positive.

HTH


More information about the freebsd-questions mailing list