[Chester LUG] worried - hacked?

[Paul Williams]

Thanks for the advice.  got chkrootkit, getting rkhunter next.

ran chkrootkit.  no problems found.  to uninstall it I use rm?

folder downloaded to is:

/home/imajica/Downloads/chkrootkit-0.48#

a little advice on rm here would go a long way!


Date: Wed, 21 May 2008 16:12:46 +0100
From: e-mail at mcrilly.co.uk
To: chester at mailman.lug.org.uk
Subject: Re: [Chester LUG] worried - hacked?

Debian/Ubuntu is a deb based system, not an RPM based system as I'm sure you know. Try synaptic, aptitude and or apt-get (the man pages, that is)


On 5/21/08, David Holden <dh at iucr.org> wrote:
On Wednesday 21 May 2008, Bryn Salisbury wrote:
> Michael,
>
> 2008/5/21 Michael Crilly <e-mail at mcrilly.co.uk>:

> > My bad, I was looking at the log wrong. I thought a process was being
> > executed by this 'Mark' but it was, in actual fact, crontab running the
> > process.
>
> Ah, you had me worried there for a second. :)

>
> > Still, nothing wrong with running a chkrootkit and rkhunter every now and
> > then. Don't forget to remove them after installing them so the binary's
> > themselves don't become infected.

>
> I agree, no harm in running them every once in a while. Better safe than
> sorry.
>
> B
>
> _______________________________________________
> Chester mailing list
> Chester at mailman.lug.org.uk

> https://mailman.lug.org.uk/mailman/listinfo/chester

anyone know if debian/ubuntu has a similar command to "rpm -Va", i.e. verify
all packages.


Dave.


--
Dr. David Holden.

See: <http://www.gnu.org/philosophy/no-word-attachments.html>
regarding Word or PowerPoint. GPG key available on request.

-------------------------------------------------------------

_______________________________________________
Chester mailing list
Chester at mailman.lug.org.uk

https://mailman.lug.org.uk/mailman/listinfo/chester


-- 
M. T. Crilly
http://www.mcrilly.co.uk/ 

_________________________________________________________________

http://clk.atdmt.com/UKM/go/msnnkmgl0010000002ukm/direct/01/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.lug.org.uk/pipermail/chester/attachments/20080521/1895af8b/attachment.html>