[Chester LUG] worried - hacked?

[Michael Crilly]

Depends on your distro? Ubuntu, sudo apt-get remove chkrootkit

On 5/21/08, Paul Williams <wilp4a at hotmail.co.uk> wrote:
>
> Thanks for the advice.  got chkrootkit, getting rkhunter next.
>
> ran chkrootkit.  no problems found.  to uninstall it I use rm?
>
> folder downloaded to is:
>
> /home/imajica/Downloads/chkrootkit-0.48#
>
> a little advice on rm here would go a long way!
>
>
> Date: Wed, 21 May 2008 16:12:46 +0100
> From: e-mail at mcrilly.co.uk
> To: chester at mailman.lug.org.uk
> Subject: Re: [Chester LUG] worried - hacked?
>
> Debian/Ubuntu is a deb based system, not an RPM based system as I'm sure you
> know. Try synaptic, aptitude and or apt-get (the man pages, that is)
>
>
> On 5/21/08, David Holden <dh at iucr.org> wrote:
> On Wednesday 21 May 2008, Bryn Salisbury wrote:
>> Michael,
>>
>> 2008/5/21 Michael Crilly <e-mail at mcrilly.co.uk>:
>
>> > My bad, I was looking at the log wrong. I thought a process was being
>> > executed by this 'Mark' but it was, in actual fact, crontab running the
>> > process.
>>
>> Ah, you had me worried there for a second. :)
>
>>
>> > Still, nothing wrong with running a chkrootkit and rkhunter every now
>> > and
>> > then. Don't forget to remove them after installing them so the binary's
>> > themselves don't become infected.
>
>>
>> I agree, no harm in running them every once in a while. Better safe than
>> sorry.
>>
>> B
>>
>> _______________________________________________
>> Chester mailing list
>> Chester at mailman.lug.org.uk
>
>> https://mailman.lug.org.uk/mailman/listinfo/chester
>
> anyone know if debian/ubuntu has a similar command to "rpm -Va", i.e. verify
> all packages.
>
>
> Dave.
>
>
> --
> Dr. David Holden.
>
> See: <http://www.gnu.org/philosophy/no-word-attachments.html>
> regarding Word or PowerPoint. GPG key available on request.
>
> -------------------------------------------------------------
>
> _______________________________________________
> Chester mailing list
> Chester at mailman.lug.org.uk
>
> https://mailman.lug.org.uk/mailman/listinfo/chester
>
>
> --
> M. T. Crilly
> http://www.mcrilly.co.uk/
>
> _________________________________________________________________
>
> http://clk.atdmt.com/UKM/go/msnnkmgl0010000002ukm/direct/01/

-- 
Sent from Google Mail for mobile | mobile.google.com

M. T. Crilly
http://www.mcrilly.co.uk/