Hello, I'm having a problem with rkhunter running as a cron job. When I run rkhunter from the shell, all tests pass as okay. But when it runs as a cron job (cron script provided by Debian package) I get a long list of warnings. See the attached logfile.
If that logfile were true I whould have been infected with nearly every rootkit know to man, so I'm guessing it's something with me or with rkhunter instead. Can anyone help? Kind regards, -- Sander Marechal http://www.jejik.com Strings (command) [ BAD ] ----------------------------------------------------------------- Found warnings: [03:26:05] Strings selftest: scanning for string /usr/lib/.../netstat... WARNING! [03:26:05] Strings selftest: scanning for string /usr/lib/.../lsof... WARNING! [03:26:05] Strings selftest: scanning for string /usr/lib/.../bkit-ssh/bkit-shdcfg... WARNING! [03:26:05] Strings selftest: scanning for string /usr/lib/.../bkit-ssh/bkit-shdcfg... [03:26:05] Strings selftest: scanning for string /usr/lib/.../bkit-ssh/bkit-shhk... WARNING! [03:26:05] Strings selftest: scanning for string /usr/lib/.../bkit-ssh/bkit-shhk... [03:26:05] Strings selftest: scanning for string /usr/lib/.../bkit-ssh/bkit-pw... WARNING! WARNING! [03:26:05] Strings selftest: scanning for string /usr/lib/.../uconf.inv... WARNING! [03:26:05] Strings selftest: scanning for string /usr/lib/.../bkit-ssh/bkit-shrs... [03:26:05] Strings selftest: scanning for string /usr/lib/.../psr... WARNING! [03:26:05] Strings selftest: scanning for string /usr/lib/.../uconf.inv... [03:26:05] Strings selftest: scanning for string /usr/lib/.../find... WARNING! [03:26:05] Strings selftest: scanning for string /usr/lib/.../slocate... WARNING! [03:26:05] Strings selftest: scanning for string /usr/lib/.../find... WARNING! WARNING! [03:26:05] Strings selftest: scanning for string /usr/lib/.../du... [03:26:05] Strings selftest: scanning for string /usr/lib/.../pstree... WARNING! [03:26:05] [03:26:05] Strings selftest: scanning for string /usr/lib/.../top... Strings selftest: scanning for string /usr/lib/.../slocate... WARNING! [03:26:05] Strings selftest: scanning for string /usr/lib/.../bkit-ssh... WARNING! WARNING! [03:26:05] Strings selftest: scanning for string /usr/lib/.../bkit-ssh... [03:26:05] Strings selftest: scanning for string /usr/lib/.bkit-... WARNING! [03:26:05] Strings selftest: scanning for string /tmp/.bkp... WARNING! [03:26:05] Strings selftest: scanning for string /tmp/.cinik... WARNING! [03:26:05] Strings selftest: scanning for string /tmp/.font-unix/.cinik... WARNING! [03:26:05] Strings selftest: scanning for string /lib/.sso... WARNING! [03:26:05] Strings selftest: scanning for string /var/run/...dica/secure... WARNING! [03:26:05] Strings selftest: scanning for string /var/run/...dica/psg... WARNING! [03:26:05] WARNING! Strings selftest: scanning for string /var/run/...dica/rdx... [03:26:05] Strings selftest: scanning for string /var/run/...dica/secure... WARNING! [03:26:05] Strings selftest: scanning for string /var/run/...dica/va... WARNING! [03:26:05] Strings selftest: scanning for string /var/run/...dica/rdx... WARNING! [03:26:05] Strings selftest: scanning for string /var/run/...dica/cl.sh... WARNING! [03:26:05] Strings selftest: scanning for string /var/run/...dica/va... WARNING! [03:26:05] Strings selftest: scanning for string /usr/bin/.etc... WARNING! [03:26:05] Strings selftest: scanning for string /var/run/...dica/cl.sh... WARNING! [03:26:05] Strings selftest: scanning for string /usr/lib/.fx/sched_host.2... WARNING! [03:26:05] Strings selftest: scanning for string /usr/bin/.etc... WARNING! WARNING! WARNING! WARNING! [03:26:05] Strings selftest: scanning for string /usr/lib/.fx/adore/adore/adore.ko... [03:26:05] Strings selftest: scanning for string /usr/lib/.fx/set_pid.2... WARNING! [03:26:05] Strings selftest: scanning for string /bin/sysback... WARNING! [03:26:05] Strings selftest: scanning for string /usr/lib/.fx/cons.saver... [03:26:05] Strings selftest: scanning for string /usr/local/bin/sysback... WARNING! WARNING! [03:26:05] Strings selftest: scanning for string /dev/.lib/lib/lib/t0rns... [03:26:05] Strings selftest: scanning for string /bin/sysback... WARNING! WARNING! [03:26:05] Strings selftest: scanning for string /dev/.lib/lib/lib/ls... [03:26:05] Strings selftest: scanning for string /usr/local/bin/sysback... WARNING! [03:26:05] Strings selftest: scanning for string /dev/.lib/lib/lib/t0rnsb... WARNING! [03:26:05] Strings selftest: scanning for string /usr/lib/.tbd... WARNING! [03:26:05] Strings selftest: scanning for string /dev/.lib/lib/lib/ps... WARNING! [03:26:05] Strings selftest: scanning for string /dev/.lib/lib/lib/t0rns... WARNING! [03:26:05] Strings selftest: scanning for string /dev/.lib/lib/lib/t0rnp... WARNING! [03:26:05] Strings selftest: scanning for string /dev/.lib/lib/lib/du... WARNING! [03:26:05] Strings selftest: scanning for string /dev/.lib/lib/lib/find... WARNING! WARNING! [03:26:05] Strings selftest: scanning for string /dev/.lib/lib/lib/ls... [03:26:05] Strings selftest: scanning for string /dev/.lib/lib/lib/ifconfig... WARNING! [03:26:05] Strings selftest: scanning for string /dev/.lib/lib/lib/t0rnsb... WARNING! [03:26:05] Strings selftest: scanning for string /dev/.lib/lib/lib/ssh.tgz... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/ps... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/top... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/t0rnp... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/sz... WARNING! WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/in.fingerd... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/ifconfig... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/1i0n.sh... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/pg... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/pstree... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/ssh.tgz... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/in.telnetd... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/top... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/sz... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/login... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/tfn... WARNING! WARNING! WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/getip.sh... [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/1i0n.sh... WARNING! [03:26:06] Strings selftest: scanning for string /usr/info/.torn/sh*... [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/pstree... WARNING! [03:26:06] [03:26:06] Strings selftest: scanning for string /usr/src/.puta/... Strings selftest: scanning for string /dev/.lib/lib/lib/in.telnetd... WARNING! [03:26:06] Strings selftest: scanning for string /usr/src/.puta/.1addr... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/mjy... WARNING! WARNING! WARNING! WARNING! [03:26:06] Strings selftest: scanning for string /usr/info/.t0rn/... [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/name... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/... [03:26:06] Strings selftest: scanning for string /usr/info/.torn/sh*... WARNING! [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/... WARNING! [03:26:06] WARNING! Strings selftest: scanning for string /usr/src/.puta/... [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/lib/dev/... WARNING! [03:26:06] Strings selftest: scanning for string /usr/src/.puta/.1addr... [03:26:06] Strings selftest: scanning for string /dev/.lib/lib/scan/... WARNING! [03:26:06] Strings selftest: scanning for string /usr/man/man1/man1/... WARNING! [03:26:06] Strings selftest: scanning for string /usr/src/.puta/.1proc... WARNING! [03:26:06] Strings selftest: scanning for string /usr/man/man1/man1/lib/... WARNING! [03:26:06] Strings selftest: scanning for string /usr/src/.puta/.1logz... WARNING! [03:26:06] Strings selftest: scanning for string /usr/man/man1/man1/lib/.lib/... [03:26:06] Strings selftest: scanning for string /usr/info/.t0rn/... WARNING! [03:26:06] Strings selftest: scanning for string /usr/man/man1/man1/lib/.lib/.backup/... WARNING! ----------------------------------------------------------------- If you're unsure about the results above, please contact the Rootkit Hunter team through the Rootkit Hunter mailinglist at [EMAIL PROTECTED] Some errors has been found while checking. Please perform a manual check on this machine ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
