[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: Possibly trojan'd netstat?
On 04/23/2013 06:41 PM, Christos Zoulas wrote:
This is what happens if egrep is your antivirus:
$egrep '(bash|^/bin/sh|/dev/[^aik]|/prof|grep|addr\.h)' /usr/bin/netstat
Binary file /usr/bin/netstat matches
$ strings /usr/bin/netstat | fgrep grep
$ fgrep -r regreply /usr/include/
/usr/include/netinet/ip_icmp.h: "mobile_regrequest", "mobile_regreply",
This is there to print icmp stats per icmp type.
Okay that makes a little more sense. Thanks.
I just wanted to make sure there wasn't a problem.
If I wanted to create a universe from scratch
I guess I should have ordered the apple pie.
Main Index |
Thread Index |