[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Tiger reports suspicious file - now what?



I just installed tiger. One of the logfiles (check_rootkit.out.1) says:

 
# Performing check for rookits...
# Running chkrootkit (/usr/sbin/chkrootkit) to perform further checks...
--ALERT-- [rootkit005a] Chkrootkit has found a file which seems to be infected because of a rootkit 
--ALERT-- [rootkit009a] A rootkit seems to be installed in the system 


I ran chkrootkit (2 different versions) manually. Nothing bad showed up
so I don't understand the message. Can I safely take this to be a false
positive?

Anthony


-- 
Anthony Campbell - ac@acampbell.org.uk 
Microsoft-free zone - Using Linux Gnu-Debian
http://www.acampbell.org.uk (blog, book reviews, 
on-line books and sceptical articles)



Reply to: