Announce: chkrootkit 0.40

From: Klaus Steding-Jessen (jessenat_private)
Date: Fri Apr 04 2003 - 05:36:31 PST

Next message: Chris Baumann: "Ann: cb_PMM - Port-Mapping-Monitoring V1.2"

Previous message: gilgil1973: "have you ever heard of "spoofing"?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

chkrootkit 0.40 is now available!  This version includes:

  * chkproc.c
    - kill() no longer used because of high number of false negatives;
    - minor corrections;

  * chkrootkit
    - True64 support;
    - new test added: init
    - new rootkits detected
      - shv4
      - Aquatica
      - ZK
    - minor corrections;

chkrootkit is a tool to locally check for signs of a rootkit.  More
information about chkrootkit and rootkits can be found at
http://www.chkrootkit.org/.

The package was successfully tested on the following systems: Linux
2.0.x, 2.2.x and 2.4.x (any distribution), FreeBSD 2.2.x, 3.x and 4.x,
OpenBSD 2.6, 2.7, 2.8, 2.9, 3.0, 3.1 and 3.2, NetBSD 1.5.2, Solaris
2.5.1, 2.6 and 8.0, HP-UX 11 and True64.

chkrootkit's tarball and its MD5 checksum are available at:

  * ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz
  * ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.md5

or at the chkrootkit's homepage, at:

  * http://www.chkrootkit.org/

More info about rootkits can be found at:

  * http://www.chkrootkit.org/index.html#related_links


Regards,
Klaus.

Next message: Chris Baumann: "Ann: cb_PMM - Port-Mapping-Monitoring V1.2"
Previous message: gilgil1973: "have you ever heard of "spoofing"?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 04 2003 - 08:41:46 PST