Also getting the same issue as Brian on Fedora 20

[alex@alex ~]$ ssh -g 2>&1 | grep -e illegal -e unknown > /dev/null && echo "System clean" || echo "System infected"

System infected

[alex@alex ~]$ ssh -G 2>&1 | grep -e illegal -e unknown > /dev/null && echo "System clean" || echo "System infected"

System clean

[alex@alex ~]$ uname -r

3.13.6-200.fc20.x86_64

[alex@alex ~]$ ssh -V

OpenSSH_6.4p1, OpenSSL 1.0.1e-fips 11 Feb 2013

Regards,

Alex

On Fri, Mar 21, 2014 at 4:54 PM, Brian Ngure <brian@pixie.co.ke> wrote:

Don't have access to the machine now but it is running Fedora 20

On Fri, Mar 21, 2014 at 3:08 PM, Brian Echesa <bechesa@gmail.com> wrote:

Which version of ssh are you using?

#ssh -V 

On Fri, Mar 21, 2014 at 3:00 PM, Brian Ngure <brian@pixie.co.ke> wrote:

Don't think this works. Just tried on freshly installed system (installed yesterday). With a capital G it shows system clean, with a small g it shows system infected.

On Fri, Mar 21, 2014 at 2:41 PM, Kiti Chigiri <kiti.chigiri@gmail.com> wrote:

<quote>

It's strongly recommend that operating systems of infected machines be completely reinstalled.

</quote>

On Fri, Mar 21, 2014 at 2:33 PM, Brian Ngure <brian@pixie.co.ke> wrote:

The question that is not answered is what a user should do if they are compromised.

On Fri, Mar 21, 2014 at 2:29 PM, Thuo Wilson <lixton@gmail.com> wrote:

On 21 March 2014 14:02, Brian Echesa <bechesa@gmail.com> wrote:

Interesting ..

ssh -G 2>&1 | grep -e illegal -e unknown > /dev/null && echo "System clean" || echo "System infected"

Whats the -G option for ? on my ssh version its not there

same as "-g".

Kind Regards,

Wilson./

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke

--

Regards

Brian Ngure

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke

--

Regards

Brian Ngure

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke

--

Kind regards,

Brian 

Linux registered user: . #565878

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke

--

Regards

Brian Ngure

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke