Hello Hunters,
i forgot yesterday to close my "Kopete" (runs under GNOME) today i have
suspicious messages in the rk.log
first msg:
Warning: The file properties have changed:
File: /usr/bin/chattr
Current hash: 4703e5adba10128a0abbc036cefae73f754db142
Stored hash : 2502e2f117415f56cd64568b042a91dd3ef79b80
Current inode: 640776 Stored inode: 640019
Current size: 7228 Stored size: 7296
Current file modification time: 1197053992
Stored file modification time : 1189103575
an in the rk-hunter logfile: *
[07:37:18] Scanning for string /usr/lib/.../bkit-ssh/bkit-shdcfg [ OK ]
[07:37:18] Scanning for string /usr/lib/.../bkit-ssh/bkit-shhk [ OK ]
[07:37:18] Scanning for string /usr/lib/.../bkit-ssh/bkit-pw [ OK ]
[07:37:18] Scanning for string /usr/lib/.../bkit-ssh/bkit-shrs [ OK ]
*(all times CET)
question, before i reinstallation my UBUNTU 7.10 Dstri. : is this the/a
worm or the bobkit..
thanks and regards
Michael (michitux)
-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
Rkhunter-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
