Web Hosting Talk







View Full Version : chkrootkit


danielbos
05-04-2003, 10:08 AM
What does this mean? do i have an intruder?
(it's a chkrootcheck)
Searching for Ambient's rootkit (ark) default files and dirs... nothing found
Searching for suspicious files and dirs, it may take a while...
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/mod_perl/.packlist /usr/lib/perl5
/site_perl/5.005/i386-linux/auto/MD5/.packlist /usr/lib/perl5/site_perl/5.005/i3
86-linux/auto/Quota/.packlist /usr/lib/perl5/site_perl/5.005/i386-linux/auto/XML
/Parser/.packlist /usr/lib/perl5/site_perl/5.005/i386-linux/auto/Devel/Symdump/.
packlist /usr/lib/perl5/site_perl/5.005/i386-linux/auto/DBI/.packlist /usr/lib/p
erl5/site_perl/5.005/i386-linux/auto/Msql-Mysql-modules/.packlist /usr/lib/perl5
/5.00503/i386-linux/.packlist


thanks in advance,

Daniel

blacknight
05-04-2003, 01:31 PM
It means that you should be clean ie. not hacked

chkrootkit searches for modified files and hidden processes etc., etc

Make sure you are using the most current version. DO NOT rely on a .pkg release, as it may not be the most up to date code.