I'm olso reciving an error message from chkrootkit but refering to a lkm trojan, for what I have seen its seems to be an error from chkrootkit. Cheers, rak
On Tue, Jul 12, 2005 at 02:53:34PM -0400, Lorenzo Taylor wrote: > I am running orville-write on my Debian Sid system, which, as far as I can > tell, > is the only package that provides /usr/bin/write. Every day, I get an email > from Cron which presents the output of chkrootkit. It shows me a list of > files > and also a message that says: > > Checking `write'... INFECTED > > I know that this is a false positive, since I have reinstalled the package > with > no change in this message. Should I file a bug against chkrootkit or > orville-write? > > Lorenzo > -- > -----BEGIN GEEK CODE BLOCK----- > Version: 3.12 > GCS d- s:+ a- C+++ UL++++ P+ L+++ E- W++ N o K- w--- > O M V- PS+++ PE Y+ PGP++ t++ 5+ X+ R tv-- b++ DI-- D+ > G e* h---- r+++ y+++ > ------END GEEK CODE BLOCK------ > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]