Package: chkrootkit Version: 0.46a-3 Severity: normal chkrootkit reports a possible Showtee Rootkit infection
[EMAIL PROTECTED]:~$ sudo /usr/sbin/chkrootkit aliens [...] Searching for Showtee... Warning: Possible Showtee Rootkit installed [...] looking at the script, it tests for (and finds) /usr/lib/libfl.so (line 859) which is installed by the flex package. Since flex is Priority: standard and thus installed on most systems, I'd like to suggest changes to the test or a mention in README.FALSE-POSITIVES Florian -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (700, 'unstable'), (650, 'testing'), (350, 'experimental') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/dash Kernel: Linux 2.6.17-2-686 Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Versions of packages chkrootkit depends on: ii binutils 2.17-2 The GNU assembler, linker and bina ii debconf [debconf-2.0] 1.5.4 Debian configuration management sy ii libc6 2.3.6.ds1-4 GNU C Library: Shared libraries ii net-tools 1.60-17 The NET-3 networking toolkit ii procps 1:3.2.7-2 /proc file system utilities chkrootkit recommends no packages. -- debconf information: * chkrootkit/run_daily: true * chkrootkit/run_daily_opts: -q * chkrootkit/diff_mode: false
signature.asc
Description: Digital signature
