Re: chkrootkit output question.

[entmoot () gmx de]

On Sat Aug 30  08:41PM, Al wrote:
> Can anyone help me to understand why I got this after running chkrootkit:
> ...
> Checking `env'... INFECTED
> ...

chkrootkit thinks, your /usr/bin/env is infected by a trojan. Check this
binary against a clean one, e.g. the one on your install cd. 
If chrootkit is right, you probably got owned.

greets, andreas




---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------