Hello: In my Desktop, this morning, I install Mandriva Free 2008.1, rkhunter, and I check a test to see the state of the new instalation, and I see this:
[13:52:41] /usr/bin/GET [ Warning ] [13:52:41] Warning: The command '/usr/bin/GET' has been replaced by a script: /usr/bin/GET: perl script text executable [13:52:41] /usr/bin/groups [ Warning ] [13:52:41] Warning: The command '/usr/bin/groups' has been replaced by a script: /usr/bin/groups: Bourne shell script text executable [13:52:42] /usr/bin/ldd [ Warning ] [13:52:42] Warning: The command '/usr/bin/ldd' has been replaced by a script: /usr/bin/ldd: Bourne-Again shell script text executable [13:52:45] /usr/bin/whatis [ Warning ] [13:52:45] Warning: The command '/usr/bin/whatis' has been replaced by a script: /usr/bin/whatis: Bourne shell script text executable [13:52:47] /sbin/ifdown [ Warning ] [13:52:47] Warning: The command '/sbin/ifdown' has been replaced by a script: /sbin/ifdown: Bourne-Again shell script text executable [13:52:47] /sbin/ifup [ Warning ] [13:52:47] Warning: The command '/sbin/ifup' has been replaced by a script: /sbin/ifup: Bourne-Again shell script text executable [13:58:31] Checking /dev for suspicious file types [ Warning ] [13:58:31] Warning: Suspicious file types found in /dev: [13:58:31] /dev/shm/pulse-shm-2725852058: data [13:58:31] Checking for hidden files and directories [ Warning ] [13:58:31] Warning: Hidden file found: /usr/share/man/man1/..1.lzma: DBase 3 data file (5120 records) [13:58:31] Anyone see this in her Mandriva? I am calm because it is a clean installation of this morning, and could not have been infected as soon (Sorry for my english, I am spanish) -- Saludos, Pedro ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
