gumper wrote: > When running rkhunter I'm getting the following message: > > "Warning: The command '/usr/bin/rkhunter' has been replaced and is not a > script: /usr/bin/rkhunter: a /bin/sh script text executable" > > Does this mean that my system has been compromised? I'm running Arch Linux > and I don't see any recent updates that would have changed this bin file. > Also, when I look at the file type it tells me "unknown".
Have you tried looking at a hex dump? Have you tried looking at it with a text editor? Have you tried getting the original and comparing content? It's supposed to be an ordinary text file, though with executable priviledge. You should be able simply to compare the content with a freshly downloaded copy. Mike -- p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);} Oppose globalization and One World Governments like the UN. This message made from 100% recycled bits. You have found the bank of Larn. I speak only for myself, and I am unanimous in that! ------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users