Announce: chkrootkit 0.40

chkrootkit 0.40 is now available! This version includes:

• chkproc.c
  • kill() no longer used because of high number of false negatives;
  • minor corrections;
• chkrootkit
  • True64 support;
  • new test added: init
  • new rootkits detected
    • shv4
    • Aquatica
    • ZK
  • minor corrections;

chkrootkit is a tool to locally check for signs of a rootkit. More information about chkrootkit and rootkits can be found at http://www.chkrootkit.org/.

The package was successfully tested on the following systems: Linux 2.0.x, 2.2.x and 2.4.x (any distribution), FreeBSD 2.2.x, 3.x and 4.x, OpenBSD 2.6, 2.7, 2.8, 2.9, 3.0, 3.1 and 3.2, NetBSD 1.5.2, Solaris 2.5.1, 2.6 and 8.0, HP-UX 11 and True64.

chkrootkit's tarball and its MD5 checksum are available at:

• ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz
• ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.md5

or at the chkrootkit's homepage, at:

• http://www.chkrootkit.org/

More info about rootkits can be found at:

• http://www.chkrootkit.org/index.html#related_links

Regards,
Klaus. Received on Fri Apr 4 11:42:18 2003