Mailinglist Archive: opensuse (4020 mails)

< Previous Next >
Re: [SLE] spyware
  • From: Sid Boyce <sboyce@xxxxxxxxxxxxxxxx>
  • Date: Sun, 03 Oct 2004 15:53:04 +0100
  • Message-id: <41601250.8030807@xxxxxxxxxxxxxxxx>
Maura Edelweiss Monville wrote:
Thank you.
My fast Internet provider is Comcast ( http://www.comcast.net/chsi.html ).
My internet connection is through the TV cable.
Most of the times I run as user "mauede" ...very raraely I need to turn to "root" .. I do that if I need to install/uninstall something.
My browser is Netscape 7.2 which occasionally marks as SPAM messages that I get ... but I haven't found out yet which criteria it uses to do so. In fact it calls spam what actually is importatnt to me.
My Internet provider does have anti-virus and anyi-spam products that can be downloaded for free but they are specific for Windows.

Sorry for my ignorance ... what is a "a rootkit hunter" ????? Regards,
Maura


I think there is a RPM available on SuSE, but I built mine from sources and it runs daily, sending mail to me as user so I can see if there is a problem.
barrabas:/usr/src/linux-2.6.9-rc3-mm1 # rpm -qi rkhunter
Name : rkhunter Relocations: (not relocatable)
Version : 1.1.4 Vendor: (none)
Release : 1.cjo Build Date: Sun 08 Aug 2004 04:37:56 BST
Install date: Sun 08 Aug 2004 04:38:40 BST Build Host: barrabas.local
Group : Applications/System Source RPM: rkhunter-1.1.4-1.cjo.src.rpm
Size : 237091 License: GPL
Signature : (none)
Packager : Craig Orsinger <cjorsinger@xxxxxxxxxxxxx>
URL : http://www.rootkit.nl/
Summary : Rootkit scans for rootkits, backdoors and local exploits.
Description :
Rootkit scanner is scanning tool to ensure you for about 99.9% you're
clean of nasty tools. This tool scans for rootkits, backdoors and local
exploits by running tests like:
- MD5 hash compare
- Look for default files used by rootkits
- Wrong file permissions for binaries
- Look for suspected strings in LKM and KLD modules
- Look for hidden files
- Optional scan within plaintext and binary files

Regards
Sid.

--
Sid Boyce .... Hamradio G3VBV and keen Flyer
=====LINUX ONLY USED HERE=====

< Previous Next >