chkrootkit

[Eitan Adler]

Glen Barber wrote:
> On Wed, Jan 28, 2009 at 5:13 PM, ajtiM <lumiwa at gmail.com> wrote:
>> Hi!
>>
>>  My system: new installed FreeBSD 7.1, KDE 3.5.10
>>
>>  I ran chkrootkit and I got:
>>
>>  ...
>>  Checking `sshd'... /usr/bin/strings: Warning: '/' is not an ordinary file
>>  ...
>>  ...
>>  Searching for t0rn's default files and dirs... nothing found
>>  Searching for t0rn's v8 defaults... Possible t0rn v8 \(or variation\) rootkit
>> installed...
>>
> 
> Have you properly updated chrootkit?  If so, it appears you have a
> rootkit on your system.  How old is the installation?
> 
> 
I think this post [1] might be relevant from the debian mailing list.

[1] http://lists.debian.org/debian-user/2001/12/msg02253.html

-- 
Eitan Adler
"Security is increased by designing for the way humans actually behave."
-Jakob Nielsen