Mailinglist Archive: opensuse (3863 mails)

[Richard Bos <radoeka@xxxxxxxxx>]

Op zondag 1 februari 2004 07:10, schreef Anders Johansson:
> On Sunday 01 February 2004 06.25, David Herman wrote:
> > Continuing my investigation I booted up my test machine w/ SuSE 9.0
> > ran checkrootkit and it showed all clean. Then I used synaptic and
> > updated ps (ps_2003.11.17-18_i586.rpm) and nothing else
> > then I ran chkroot again and the errors are there.
>
> chkrootkit is reacting to the string /prof in top. That string isn't in the
> src.rpm, but it is in the binary. That alone is very suspicious. It does
> look like kraxel's binaries are infected. I wonder what other niceties are
> in the binaries in the apt repo

chkrootkit :)

so you can;
apt -y install chkrootkit

-- 
Richard Bos
Without a home the journey is endless