Rudy edition and Chkrootkit, weird results
Posted: Tue 06 Mar 2007, 12:06
Hi Debernardis, I'm using from cd the latest 070227 Ruddy edition. I did a scan with chkrootkit and the results came with some infected files. I booted and rebooted several times and got the same results.
Checking `basename'... INFECTED
Checking `cron'... INFECTED
Checking `dirname'... INFECTED
Checking `echo'... INFECTED
Checking `env'... INFECTED
Checking `login'... INFECTED
Checking `passwd'... INFECTED
Checking `traceroute'... INFECTED
Searching for Suckit rootkit... Warning: /sbin/init INFECTED
Im running it in a normal cd (not a multi session) so I haven't modified or changed anything in it.
Can they be false positives or something to worry about?
Checking `basename'... INFECTED
Checking `cron'... INFECTED
Checking `dirname'... INFECTED
Checking `echo'... INFECTED
Checking `env'... INFECTED
Checking `login'... INFECTED
Checking `passwd'... INFECTED
Checking `traceroute'... INFECTED
Searching for Suckit rootkit... Warning: /sbin/init INFECTED
Im running it in a normal cd (not a multi session) so I haven't modified or changed anything in it.
Can they be false positives or something to worry about?