On Sun, 2010-07-11 at 19:49 -0500, Chris wrote: > > Still this morning I had the below warnings. Do I need to add 'hdparm' > to the end of the path? > > Warning: SHV4 Rootkit [ Warning ] > File '/usr/include/file.h' found > > Warning: Checking for possible rootkit strings [ Warning ] > Found string 'hdparm' in file '/etc/rc.d/init.d/bootlogd'. Possible > rootkit: Xzibit Rootkit > Found string 'hdparm' in file '/etc/rc.d/rc.sysinit'. Possible rootkit: > Xzibit Rootkit > Can you run whatever command you use to run rkhunter and add the '--debug' option to it please. Then email me the resulting output file in /tmp. Also can you email me the log file (usually /var/log/rkhunter.log).
Thanks, John. -- John Horne Tel: +44 (0)1752 587287 University of Plymouth, UK Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
