D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Rootkit Query

 

On Thu, 19 May 2005 11:00:49 +0100
David Bell wrote:

CHKROOTKIT states that it does not ensure that the target has not been 
cracked. [snip]

One thing that strikes me with this comment should be fairly obvious.  If you run 
chrootkit for the first-time on an already cracked system, then it will consider the 
cracked files to be "normal".

Grant.
-- 
Artificial intelligence is no match for nuratal stidutipy.

--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe. FAQ: www.dcglug.org.uk/linux_adm/list-faq.html