John Horne wrote:
> On Mon, 2009-01-12 at 12:21 -0600, Mike McCarty wrote:
>> Thanks for the new version. After a few little tweaks (like tracking
>> down the move of the .conf file) and a propupd seems wonderful.
>>
>> Except...
>>
>> I had all tests enabled, and now it seemingly hangs. The display
>> gets to this point:
>>
>> Performing additional rootkit checks
>> Suckit Rookit additional checks [ OK ]
>> Checking for possible rootkit files and directories [ None found ]
>> Checking for possible rootkit strings [ None found ]
>>
>>
>> Performing malware checks
>> Checking running processes for deleted files [ Warning ]
>> Checking running processes for suspicious files [ None found ]
>> Checking for hidden processes [ Skipped ]
>>
> Since RKH says it has skipped the hidden processes test, it is not that
> one that is causing the delay.
>
> The next test is the 'suspscan' test. As the config file comments state:
>
> Please do not enable by default as suspscan is CPU and I/O intensive
> and prone to producing false positives. Do review all settings before
> usage.
>
> If you leave RKH running (how long will depend on your system spec) then
> it should complete.
Ok, I also wonder why the process using the CPU isn't reported by
"top".
I'll try another "full run" and let it have its head. We'll
see how long it takes to run.
Also, thanks for the other reply.
AND,
thanks for the great tool!
Mike
--
p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);}
Oppose globalization and One World Governments like the UN.
This message made from 100% recycled bits.
You have found the bank of Larn.
I speak only for myself, and I am unanimous in that!
------------------------------------------------------------------------------
This SF.net email is sponsored by:
SourcForge Community
SourceForge wants to tell your story.
http://p.sf.net/sfu/sf-spreadtheword
_______________________________________________
Rkhunter-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
