Re: [0.5OT answer]possible rootkit, maybe partial?

From: nobody (nobodyat_private)
Date: Thu Apr 03 2003 - 04:55:14 PST

  • Next message: James C Slora Jr: "RE: Increase in Source to Port 445"

    Not exactly an answer you would expect, and probably not applicable in your 
    case (where I think you really have an issue), but something you may want to 
    consider when assuming things based on words found in some packages: in the 
    /usr/src/linux directory do this:
    
    root@my_box#  find . -type f -print |xargs grep -i 'fuck'
    
    and see what you can find. You can then replace the word above with others, 
    similarly colorful, and you'll see how imaginative the Linux developers could 
    be ;)
    
    Stef
    
    On Wednesday 02 April 2003 09:47 pm, Benjamin Tomhave wrote:
    > Hello,
    <snip>> # reboot
    >
    > Broadcast message from root (pts/0) (Wed Apr  2 20:27:23 2003):
    >
    > The system is going down for reboot NOW!
    > /dev/null
    > RK_Init: idt=0xc03b0000, sct[]=0xc03300f4, FUCK: Can't find kmalloc()!
    >
    > Now, call me crazy, but the last part of the last line doesn't strike me as
    > something that belongs.  
    <snip>
    
    
    
    ----------------------------------------------------------------------------
    Powerful Anti-Spam Management and More...
    SurfControl E-mail Filter puts the brakes on spam,
    viruses and malicious code. Safeguard your business
    critical communications. Download a free 30-day trial:
    http://www.securityfocus.com/SurfControl-incidents
    



    This archive was generated by hypermail 2b30 : Thu Apr 03 2003 - 16:40:08 PST