Can a person take a clean, lets say mandrake 10 linux operating system pack add a root kit, load it to CD and then sell it as 3rd party software. If so how would a noob such as myself know.
Never use any software from an untrusted source.
I think comparing md5sums would be a check if needed.
The reputable distributors of cheap linux CDs are not going to be doing this.