Re: [Rkhunter-users] mechdarwin psybnc rootkit not found by rkhunter

2007-05-14 Thread unspawn
Hello Nils, On Mon, 14 May 2007 12:28:05 +0200 "Nils Breunese (Lemonbit Internet)" <[EMAIL PROTECTED]> wrote: >The gzipped tarball clocks in at 1.3 MB, while the tracker allows >256000 bytes max. which IMHO is fortunate, even though you wouldn't say so :-] I'd rather not have nastiness as

Re: [Rkhunter-users] mechdarwin psybnc rootkit not found by rkhunter

2007-05-14 Thread Nils Breunese (Lemonbit Internet)
John Horne wrote: > On Mon, 2007-05-14 at 10:03 +0200, Nils Breunese (Lemonbit Internet) > wrote: >> >> I have a tarball of some nastiness I recently found in a server's /tmp >> dir. Rkhunter 1.2.9 indeed didn't notice anything, chkrootkit did warn >> me >> of an infected port. Is there somewhere

Re: [Rkhunter-users] mechdarwin psybnc rootkit not found by rkhunter

2007-05-14 Thread John Horne
On Mon, 2007-05-14 at 10:03 +0200, Nils Breunese (Lemonbit Internet) wrote: > > I have a tarball of some nastiness I recently found in a server's /tmp > dir. Rkhunter 1.2.9 indeed didn't notice anything, chkrootkit did warn me > of an infected port. Is there somewhere where I can send these files f

Re: [Rkhunter-users] mechdarwin psybnc rootkit not found by rkhunter

2007-05-14 Thread Nils Breunese (Lemonbit Internet)
Leif Carlsson wrote: > Due to my stupidity and lazyness I used a too simple password on an > account and got "infected". > This was just a test machine so it didn't "break" anything important. > > But rkhunter didn't find it when I searched the server. I have a tarball of some nastiness I recentl