This is the tool I used to help find the root kit (thanks to fellow PLUG members).  The web site gives a lot of links 
to various pages about some given root kit.  I was hoping there was a kind of root kit "portal" page with info about 
most root kits.  Kind of a one stop shop.

I'll keep looking.
Thanks for your help.
Peter

On 23 Oct 2002 at 14:41, J.Francois wrote:

> Try:
> http://www.chkrootkit.org/
> 
> On Wed, Oct 23, 2002 at 02:17:58PM -0700, az_pete@cactusfamily.com wrote:
> > Hi All,
> > 
> > Does anyone know if there is a website that has info about root kits. One of my servers was infected with the ShowTee 
> > root kit.  I did find some info about ShowTee by searching on google, but it wasn't as helpful as I'd have hoped.
> > I'm looking for something similar to Symantec's Virus Encyclopedia, where I can type in the name of a virus and I get 
> > detailed info about how it spreads, what type of files it infects, how to clean it and any variants of the virus.
> > Is there such a site for root kits?
> > 
> > Any help would be appreciated.
> > Thanks, 
> > Peter
> > 
> > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> > PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> > To subscribe, unsubscribe, or to change  you mail settings:
> > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> 
> -- 
> 
> --
> Jean Francois - JLF Sends...This sig is not RFC-1855 compliant!
> Getting Facts - $35:
> http://www.winface.com/blurb.html
> Getting Certs - $40:
> http://www.brainbench.com/transcript.jsp?pid=1214021
> Getting Published - Priceless:
> http://www.informit.com/isapi/authorid~{6AD44647-E752-4CAB-B911-D3246F294DBA}/authors/author.asp
> My Resume: http://www.magusnet.com/resume.txt or http://www.magusnet.com/resume.pdf
> "Tell them we are not Gods, but UNIX Admins, which is the next best thing."
> You're right. There is no I in team. It's just me and a little t & a...
> "The future is here; it's just not evenly distributed yet." - William Gibson
> 
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change  you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> 
>