Hi >I hope it's version 1.3.4?
Yes this is 1.3.4. The directory doesn't have the .../rk directory in it. only this: r...@shiggler-laptop:/tmp/.ICE-unix# cd .. r...@shiggler-laptop:/tmp# cd .X11-unix r...@shiggler-laptop:/tmp/.X11-unix# ls -la total 30 drwxrwxrwt 2 root root 1024 2009-01-04 11:12 . drwxrwxrwt 9 root root 28672 2009-01-04 12:00 .. srwxrwxrwx 1 root root 0 2009-01-04 11:12 X0 i performed this function afterwards to back up my concerns: r...@shiggler-laptop:/tmp/.X11-unix# netstat -an Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN tcp 0 1 192.168.3.100:45618 192.168.3.254:80 SYN_SENT tcp 0 0 192.168.3.100:55264 24.153.19.144:80 ESTABLISHED udp 0 0 0.0.0.0:32768 0.0.0.0:* udp 0 0 0.0.0.0:68 0.0.0.0:* udp 0 0 0.0.0.0:5353 0.0.0.0:* Active UNIX domain sockets (servers and established) Proto RefCnt Flags Type State I-Node Path unix 2 [ ACC ] STREAM LISTENING 18612 @/tmp/dbus-1E0C2lkyAC unix 2 [ ACC ] STREAM LISTENING 18598 /tmp/.ICE-unix/5864 unix 2 [ ACC ] STREAM LISTENING 18412 /tmp/orbit-shiggler/linc-16f3-0-680e3a22ab4ec unix 2 [ ACC ] STREAM LISTENING 18333 /tmp/keyring-BslWN5/socket unix 2 [ ACC ] STREAM LISTENING 18220 /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 22573 /tmp/.X11-unix/X0 now, about the other issue like sym links i didn't create. i erased the logs some days ago when i had version 1.3.2 installed so i don't have the details for that. here is a list of the links i was talking about. lrwxrwxrwx 1 root root 31 2008-05-15 19:32 rlogin.1.gz -> /usr/share/man/man1/slogin.1.gz lrwxrwxrwx 1 root root 36 2008-06-05 20:41 rmid -> /usr/lib/jvm/java-6-sun/jre/bin/rmid lrwxrwxrwx 1 root root 46 2008-06-05 20:41 rmid.1.gz -> /usr/lib/jvm/java-6-sun/jre/man/man1/rmid.1.gz lrwxrwxrwx 1 root root 43 2008-06-05 20:41 rmiregistry -> /usr/lib/jvm/java-6-sun/jre/bin/rmiregistry lrwxrwxrwx 1 root root 53 2008-06-05 20:41 rmiregistry.1.gz -> /usr/lib/jvm/java-6-sun/jre/man/man1/rmiregistry.1.gz lrwxrwxrwx 1 root root 12 2008-05-15 19:32 rsh -> /usr/bin/ssh lrwxrwxrwx 1 root root 28 2008-05-15 19:32 rsh.1.gz -> /usr/share/man/man1/ssh.1.gz lrwxrwxrwx 1 root root 23 2008-05-15 19:32 serialver -> /usr/bin/gserialver-4.2 lrwxrwxrwx 1 root root 39 2008-05-15 19:32 serialver.1.gz -> /usr/share/man/man1/gserialver-4.2.1.gz lrwxrwxrwx 1 root root 42 2008-06-05 20:41 servertool -> /usr/lib/jvm/java-6-sun/jre/bin/servertool lrwxrwxrwx 1 root root 52 2008-06-05 20:41 servertool.1.gz -> /usr/lib/jvm/java-6-sun/jre/man/man1/servertool.1.gz lrwxrwxrwx 1 root root 34 2008-05-15 19:32 ssh-askpass -> /usr/lib/openssh/gnome-ssh-askpass lrwxrwxrwx 1 root root 41 2008-06-05 20:41 tnameserv -> /usr/lib/jvm/java-6-sun/jre/bin/tnameserv lrwxrwxrwx 1 root root 51 2008-06-05 20:41 tnameserv.1.gz -> /usr/lib/jvm/java-6-sun/jre/man/man1/tnameserv.1.gz lrwxrwxrwx 1 root root 20 2008-05-15 19:32 vncviewer -> /usr/bin/xvnc4viewer lrwxrwxrwx 1 root root 36 2008-05-15 19:32 vncviewer.1.gz -> /usr/share/man/man1/xvnc4viewer.1.gz lrwxrwxrwx 1 root root 20 2008-05-15 19:32 xvncviewer -> /usr/bin/xvnc4viewer lrwxrwxrwx 1 root root 36 2008-05-15 19:32 xvncviewer.1.gz -> /usr/share/man/man1/xvnc4viewer.1.gz it would be different if it wasn't these kinds of programs and also, i erased ALL vnc like programs only to find sym links of them again???? ________________________________________________ Get your own "800" number Voicemail, fax, email, and a lot more http://www.ureach.com/reg/tag ------------------------------------------------------------------------------ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users