On Monday 28 July 2008 7:33 am, Mix Tux wrote: > Hello Listmembers, > > rk runs at a cronjob every day at: 07:30am > > yesterday in the evening my pc was very slow?! > (intelcore2 2,3g and 2gb ram with ubuntu 8.04) > > then i search with rkhunter manually > > and thats the output: > > [23:08:20] File: /bin/ip > [23:08:20] Current inode: 4915300 Stored inode: 4915219 > [23:08:20] Current file modification time: 1215618519 > [23:08:20] Stored file modification time : 1207985171 > > > [23:08:20] Warning: The file properties have changed: > [23:08:20] File: /bin/kill > [23:08:20] Current hash: 5f85ce91eafbd85f79441f71ecad0f0db722c1bf > [23:08:20] Stored hash : 18e7cde8dfbeac32608ae47f857d2b168cfc72cb > [23:08:20] Current inode: 4915243 Stored inode: 5242882 > [23:08:20] Current file modification time: 1215682114 > [23:08:20] Stored file modification time : 1205447087 > > > [23:08:20] /bin/kill [ Warning ] > [23:08:20] Warning: The file properties have changed: > [23:08:20] File: /bin/kill > [23:08:20] Current hash: 5f85ce91eafbd85f79441f71ecad0f0db722c1bf > [23:08:20] Stored hash : 18e7cde8dfbeac32608ae47f857d2b168cfc72cb > [23:08:20] Current inode: 4915243 Stored inode: 5242882 > [23:08:20] Current file modification time: 1215682114 > [23:08:20] Stored file modification time : 1205447087 > > > [23:08:21] Warning: The file properties have changed: > [23:08:21] File: /bin/ps > [23:08:21] Current hash: 62c7d1839f644c5dfb6179015e7e3017ac6a6afa > [23:08:21] Stored hash : 7cbcd8aa6df2ffbfbe783ae7fe7d1ea5a790ed81 > [23:08:21] Current inode: 4915259 Stored inode: 5243042 > [23:08:21] Current file modification time: 1215682114 > [23:08:21] Stored file modification time : 1205447087 > > [23:08:26] Warning: The file properties have changed: > [23:08:26] File: /usr/bin/top > > [23:08:26] Warning: The file properties have changed: > [23:08:26] File: /usr/bin/vmstat > > > [23:08:26] Warning: The file properties have changed: > [23:08:26] File: /usr/bin/w > > [23:08:26] Warning: The file properties have changed: > [23:08:26] File: /usr/bin/watch > > [23:08:27] Warning: The file properties have changed: > [23:08:27] File: /usr/bin/w.procps > > [23:08:28] Warning: The file properties have changed: > [23:08:28] File: /sbin/ip > > [23:08:29] Warning: The file properties have changed: > [23:08:29] File: /sbin/sysctl > > changes on kill file?? > pls, help. and thanks a lot... > > Mit freundlichen Grüßen / Yours sincerely > > Michael > -- >
This is a well-known and oft-discussed scenario. You probably have your system set up to automatically update packages, so RKH is reporting on the changes. Take a look at your rkhunter.conf "PKGMGR=" line. You may need to tweak that (and the preceding write-up describes it well. Run "rkhunter --propupd" to try and correct the issue, then "rkhunter -c" to see if, indeed, you did. HTH Dimitri -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
