[Tfug] Chkrootkit
Felix Tilley
fetilley at earthlink.net
Tue Nov 28 15:05:38 MST 2006
Do any of you use chkrootkit? This is from www.chkrootkit.org. It is
in Brazil, but it appears to be hosted by Google in the USA. A lot of
Brazil IP space is blocked.
I never found it useful. I have never been infected. But I still use
it, just in case.
www.chkrootkit.org
Warning: It looks for lastlog in the /var/adm directory.
This might be useful:
lastlog -> /var/log/lastlog
The strings program seems to wander into the wilderness and gets lost.
I never got it to complete.
Felix in Tucson
More information about the tfug
mailing list