Re: chkrootkit (false) positive

2016-03-23 Tema obsahu Dan Lukes
Peter Rosa wrote on 23.3.2016 18:48: >> Copak ti vypise >> >>> ssh -G 2>&1 | grep -e illegal -e unknown > /dev/null && echo "System >>> clean" || echo "System infected" > System infected OK. To's pustil presne ten prikaz, co ten chrootkit pousti sam, kdyz se pokousi detekovat infekci. Jak je vid

Re: chkrootkit (false) positive

2016-03-23 Tema obsahu Peter Rosa
na 10.3-PRERELEASE) hlasi: Possible Linux/Ebury - Operation Windigo installetd Copak ti vypise ssh -G 2>&1 | grep -e illegal -e unknown > /dev/null && echo "System clean" || echo "System infected" a co ssh -G # ssh -G 2>&1 | grep -e illegal -e unknown > /dev/null && echo "System clean" |

Re: chkrootkit (false) positive

2016-03-23 Tema obsahu Dan Lukes
Peter Rosa wrote: prosim, pouzivate niekto chkrootkit (aktualna verzia 0.50)? Ne. na 10.3-PRERELEASE) hlasi: Possible Linux/Ebury - Operation Windigo installetd Copak ti vypise ssh -G 2>&1 | grep -e illegal -e unknown > /dev/null && echo "System clean" || echo "System infected" a co s

chkrootkit (false) positive

2016-03-23 Tema obsahu Peter Rosa
Zdravim vsetkych este raz, prosim, pouzivate niekto chkrootkit (aktualna verzia 0.50)? Na cistej instalacii FreeBSD 10.2-RELEASE (z DVD), svn update a rekompilacii zdrojakov (na 10.3-PRERELEASE) hlasi: Possible Linux/Ebury - Operation Windigo installetd Je to false positive a hlasi to aj ost