chkrootkit

Ceri Davies ceri at submonkey.net
Sun Apr 9 18:46:29 UTC 2006


On Sun, Apr 09, 2006 at 05:11:03PM +0300, Vitaliy K wrote:
> ??, bugbusters!
> 
> I badly know english, beforehand I apologize for the illiteracy.
> 
> I ask the help you in the decision of my problem.
> 
> I   have   loaded   program   stock-takings   rootkit   from   a  site
> http://www.chkrootkit.org/.
> 
> Has  started,  and  has received below resulted result. I am disturbed
> with a line   Checking `date'... INFECTED

chkrootkit has historically given false positives on FreeBSD.  Whether
this is still the case or not, I wouldn't like to say.

> Has  come  home, has put same FreeBSD on a domestic computer, the same
> report,   Checking `date'... INFECTED
> 
> How to me to be? It is a mistake of developers of the program or yours?

I can't think of how this could possibly be our fault.

Ceri
-- 
That must be wonderful!  I don't understand it at all.
                                                  -- Moliere
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-bugbusters/attachments/20060409/f9c19698/attachment.pgp


More information about the freebsd-bugbusters mailing list