[Tfug] Chkrootkit

Felix Tilley fetilley at earthlink.net
Tue Nov 28 15:05:38 MST 2006


Do any of you use chkrootkit?  This is from www.chkrootkit.org.  It is 
in Brazil, but it appears to be hosted by Google in the USA.  A lot of 
Brazil IP space is blocked.

I never found it useful.  I have never been infected.  But I still use 
it, just in case.

www.chkrootkit.org

Warning:  It looks for lastlog in the /var/adm directory.

This might be useful:


lastlog -> /var/log/lastlog

The strings program seems to wander into the wilderness and gets lost.  
I never got it to complete.

Felix in Tucson







More information about the tfug mailing list