Re: chrootkit suspicious files and directories chkrootkit

2013-02-04 Thread sp11
On Mon, 4 Feb 2013 02:28:59 +0100 sp11 wrote: > Hello, > > chrootkit gives following message: > chkrootkit spelled correctly. sorry -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http:/

Re: chrootkit suspicious files and directories

2013-02-04 Thread Martin Steigerwald
Am Montag, 4. Februar 2013 schrieb Sthu Deus: > You wrote: > > chrootkit gives following message > > Oops! Please excuse - I mixed up chrootkit w/ rkhunter. > Please drop my previous message. Using rkhunter for ages on my server. Never got a false positive. -- Martin 'Helios' Steigerwald - htt

Re: chrootkit suspicious files and directories

2013-02-03 Thread Sthu Deus
You wrote: > chrootkit gives following message Oops! Please excuse - I mixed up chrootkit w/ rkhunter. Please drop my previous message. Sthu. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archiv

Re: chrootkit suspicious files and directories

2013-02-03 Thread Sthu Deus
Good time of the day, sp11. You wrote: > chrootkit gives following message: > > Searching for suspicious files and dirs, it may take a while... > > The following suspicious files and directories were found: > > /usr/lib/pymodules/python2.6/PyQt4/uic/widget-plugins/.noinit > /usr/lib/pymodu

Re: chrootkit suspicious files and directories

2013-02-03 Thread Roger Leigh
On Mon, Feb 04, 2013 at 02:28:59AM +0100, sp11 wrote: > /lib/init/rw/.ramfs Harmless. Created during boot by mountall-bootclean to prevent cleaning. See /lib/init/bootclean.sh. Not sure about the others though. -- .''`. Roger Leigh : :' : Debian GNU/Linuxhttp://people.debian.org/~rl