On Thu, May 13, 2004 at 03:25:44PM -0400, Shaun T. Erickson wrote: > I just installed and ran the chkrootkit port on my 5.2.1-RELEASE-p5 > system. It says my date command is infected. Nothing else, just that. > How can I determine if this is a false positive or if I'm truly hacked?
Talk to the chkrootkit developers. Their tool provides so many false positives that they're the ones who should be bearing the responsibility for dealing with user confusion :) Kris
pgp00000.pgp
Description: PGP signature
