[ Announce - chkrootkit 0.35 is now available ]

From: Nelson Murilo (nelsonat_private)
Date: Fri Jan 18 2002 - 09:24:51 PST

  • Next message: William Stearns: "p0f 1.8 final release"

    chkrootkit 0.35 is now available!  This version includes:
    
      * strings.c (thanks to Sean D. True)
      * new tests: ldsopreload and lsof;
      * new ports added to the bindshell test;
      * new rootkits and trojans detected:
    
        - RST.b trojan;
        - duarawkz; (thanks to Leif Neland)
        - knark LKM;
        - HiDrootkit;
        - Monkit;
        - Bobkit; (thanks to m0xx)
        - Pizdakit; (thanks to Kaveh Goudarzi)
        - t0rn v8.0 (new variant). (thanks to Bob Grabowsky and Mihai Sandu)
    
    chkrootkit is a tool to locally check for signs of a rootkit.  More
    information about chkrootkit and rootkits can be found at
    http://www.chkrootkit.org/.
    
    The package was successfully tested on the following systems: Linux
    2.0.x, 2.2.x and 2.4.x (any distribution), FreeBSD 2.2.x, 3.x and 4.x,
    OpenBSD 2.6, 2.7, 2.8, 2.9 and 3.0, Solaris 2.5.1, 2.6 and 8.0.
    
    chkrootkit's tarball and its MD5 checksum are available at:
    
      * ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz
      * ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.md5
    
    or at the chkrootkit's homepage, at:
    
      * http://www.chkrootkit.org/
    
    More info about rootkits can be found at:
    
      * http://www.chkrootkit.org/index.html#related_links
    



    This archive was generated by hypermail 2b30 : Fri Jan 18 2002 - 09:52:17 PST