<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body class='hmmessage'>
cheers.<br><br>> Date: Wed, 21 May 2008 17:35:41 +0100<br>> From: e-mail@mcrilly.co.uk<br>> To: chester@mailman.lug.org.uk<br>> Subject: Re: [Chester LUG] worried - hacked?<br>> <br>> Depends on your distro? Ubuntu, sudo apt-get remove chkrootkit<br>> <br>> On 5/21/08, Paul Williams <wilp4a@hotmail.co.uk> wrote:<br>> ><br>> > Thanks for the advice. got chkrootkit, getting rkhunter next.<br>> ><br>> > ran chkrootkit. no problems found. to uninstall it I use rm?<br>> ><br>> > folder downloaded to is:<br>> ><br>> > /home/imajica/Downloads/chkrootkit-0.48#<br>> ><br>> > a little advice on rm here would go a long way!<br>> ><br>> ><br>> > Date: Wed, 21 May 2008 16:12:46 +0100<br>> > From: e-mail@mcrilly.co.uk<br>> > To: chester@mailman.lug.org.uk<br>> > Subject: Re: [Chester LUG] worried - hacked?<br>> ><br>> > Debian/Ubuntu is a deb based system, not an RPM based system as I'm sure you<br>> > know. Try synaptic, aptitude and or apt-get (the man pages, that is)<br>> ><br>> ><br>> > On 5/21/08, David Holden <dh@iucr.org> wrote:<br>> > On Wednesday 21 May 2008, Bryn Salisbury wrote:<br>> >> Michael,<br>> >><br>> >> 2008/5/21 Michael Crilly <e-mail@mcrilly.co.uk>:<br>> ><br>> >> > My bad, I was looking at the log wrong. I thought a process was being<br>> >> > executed by this 'Mark' but it was, in actual fact, crontab running the<br>> >> > process.<br>> >><br>> >> Ah, you had me worried there for a second. :)<br>> ><br>> >><br>> >> > Still, nothing wrong with running a chkrootkit and rkhunter every now<br>> >> > and<br>> >> > then. Don't forget to remove them after installing them so the binary's<br>> >> > themselves don't become infected.<br>> ><br>> >><br>> >> I agree, no harm in running them every once in a while. Better safe than<br>> >> sorry.<br>> >><br>> >> B<br>> >><br>> >> _______________________________________________<br>> >> Chester mailing list<br>> >> Chester@mailman.lug.org.uk<br>> ><br>> >> https://mailman.lug.org.uk/mailman/listinfo/chester<br>> ><br>> > anyone know if debian/ubuntu has a similar command to "rpm -Va", i.e. verify<br>> > all packages.<br>> ><br>> ><br>> > Dave.<br>> ><br>> ><br>> > --<br>> > Dr. David Holden.<br>> ><br>> > See: <http://www.gnu.org/philosophy/no-word-attachments.html><br>> > regarding Word or PowerPoint. GPG key available on request.<br>> ><br>> > -------------------------------------------------------------<br>> ><br>> > _______________________________________________<br>> > Chester mailing list<br>> > Chester@mailman.lug.org.uk<br>> ><br>> > https://mailman.lug.org.uk/mailman/listinfo/chester<br>> ><br>> ><br>> > --<br>> > M. T. Crilly<br>> > http://www.mcrilly.co.uk/<br>> ><br>> > _________________________________________________________________<br>> ><br>> > http://clk.atdmt.com/UKM/go/msnnkmgl0010000002ukm/direct/01/<br>> <br>> -- <br>> Sent from Google Mail for mobile | mobile.google.com<br>> <br>> M. T. Crilly<br>> http://www.mcrilly.co.uk/<br>> <br>> _______________________________________________<br>> Chester mailing list<br>> Chester@mailman.lug.org.uk<br>> https://mailman.lug.org.uk/mailman/listinfo/chester<br><br /><hr />Get fish-slapping on Messenger! <a href='http://clk.atdmt.com/UKM/go/msnnkmgl0010000008ukm/direct/01/' target='_new'>Play Now</a></body>
</html>