Hello, I only know rkhunter. This is the result: [06:09:25] System checks summary [06:09:25] ===================== [06:09:25] [06:09:25] File properties checks... [06:09:25] Required commands check failed [06:09:25] Files checked: 151 [06:09:25] Suspect files: 1 [06:09:25] [06:09:25] Rootkit checks... [06:09:26] Rootkits checked : 245 [06:09:26] Possible rootkits: 1 [06:09:26] Rootkit names : Xzibit Rootkit [06:09:26] [06:09:26] Applications checks... [06:09:26] Applications checked: 4 [06:09:26] Suspect applications: 0
Best, Mike 2012/4/22 <[email protected]> > ** > Hi, > > Try another check with rootkit hunter. > > Alex > Envoyé depuis mon BlackBerry smartphone MTN Congo > ------------------------------ > *From: * Mike Sievers <[email protected]> > *Sender: * [email protected] > *Date: *Sun, 22 Apr 2012 14:41:17 +0200 > *To: *<[email protected]> > *ReplyTo: * [email protected] > *Subject: *[ossec-list] Suckit rootkit > > Hi List, > > on my opensuse 12.1 I found: > Trojaned version of file '/sbin/init' detected. Signature used: 'HOME' > (Suckit rootkit). > I hope this is false positive, isn´t it? > And some alerts like this: > File '/dev/.sysconfig/network/config-lo' present on /dev. Possible hidden > file. > > ??? >
