Incoming from Shane&Lisa: > Rafael, > Do you have the 'chkrootkit' command? If you don't have that utility you can get > it here: www.chkrootkit.org
You should always follow that up with the address of chkrootkit archives! It's a great tool. It also tends to produce a lot of false positives, especially at upgrade time. chkrootkit-users is a teriffic list to be on; high signal to noise ratio and low bandwidth. If you go for it, and it reports you're rooted, check the archives first! Chances are, it's a flaw in Linux /proc that's been reported previously. http://marc.theaimsgroup.com/?l=chkrootkit-users -- Any technology distinguishable from magic is insufficiently advanced. (*) http://www.spots.ab.ca/~keeling - - _______________________________________________ clug-talk mailing list [EMAIL PROTECTED] http://clug.ca/mailman/listinfo/clug-talk_clug.ca
