The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
138 views

The “chkproc: Warning: Possible LKM Trojan installed” appears and disappears

I have chkrootkit version 0.49 installed on Debian 6.5. When I run sudo chkrootkit, I keep getting variable warnings about the LKM trojan, when I run the command repeatedly. First run Checking ...
1
vote
1answer
33 views

chkrootkit checking sniffer's log takes ages

On my server chkrootkit hangs on Searching for sniffer's logs, it may take a while... After half an hour, I stopped this, so how can I find out what chkrootkit is trying to achieve in this step? ...
1
vote
1answer
123 views

Chkrootkit found alot of suspicious files and directories, and /sbin/init INFECTED

I was just running chkrootkit on my Fedora 20 x86_64. Here are some dubious results. Anyone know if these are false positives? Do I have a compromised system? Here are the suspect files and ...
2
votes
1answer
230 views

rkhunter /usr/bin/ssh && /usr/sbin/sshd [Warning]

My last rkhuter scan reported a couple of warnings that deserve to be checked(for my noob eyes). Main reason for my suspect is that i wasn't on the machine at (03-Apr-2014 01:12:12) ->AM I googled ...
2
votes
1answer
57 views

Verifying Debian/Ubuntu packages integrity when booting from a read-only DVD?

Is there an easy way to boot a Debian-based Linux system from a read-only medium (say a Live Linux read-only DVD) and then use Debian's .deb checksums / signatures (?) to verify that the files ...
2
votes
1answer
308 views

I need find 1 simple rootkit to test chkrootkit in centos?

I want to find 1 simple rootkit to test chkrootkit (a tool used to detect rootkit). Please recommend to me 1 rootkit and show me how to set it up or install it.
6
votes
2answers
3k views

rkhunter warns me about root.rules

I run : :~$ sudo rkhunter --checkall --report-warnings-only One of the warnings I've got : Warning: Suspicious file types found in /dev: /dev/.udev/rules.d/root.rules: ASCII text and ...
0
votes
2answers
298 views

chkrootkit throws Signal 13 when searching through /var/tmp

On my debian squeeze server in the chkrootkit log I get loads of these errors: /usr/bin/find: Prozeß "head" wurde durch das Signal 13 abgebrochen. /usr/bin/find: Prozeß "head" wurde durch das Signal ...
2
votes
2answers
384 views

Chkrootkit warning about infected port 600

I run the Tiger Automatic Auditor on my Debian Linux system, and recently got emailed the following: # Running chkrootkit (/usr/sbin/chkrootkit) to perform further checks... OLD: --ALERT-- ...
2
votes
1answer
606 views

How to install a shared library in Linux

As part of my research work I have to study a rootkit. So I downloaded ncom rootkit and tried installing. It didnt have any installion files. Please help me in installing it.
2
votes
2answers
516 views

Cannot understand chkrootkit's result

I couldn't understand the output of chkrootkit command: $ chkrootkit -q -r / /usr/lib/.libssl.so.10.hmac /usr/lib/.libfipscheck.so.1.hmac /usr/lib/firefox-3.6/.autoreg ...