Running rkhunter because I've definitely been hacked and I'm trying to clean up
instead of re-imaging and starting over.
This is what happens on my first use:
Performing additional rootkit checks
Suckit Rookit additional checks [ OK ]
Checking for possible
On Thu, 2011-06-30 at 13:55 -0500, Anthony Dye wrote:
Running rkhunter because I’ve definitely been hacked and I’m trying to
clean up instead of re-imaging and starting over.
This is what happens on my first use:
Performing additional rootkit checks
Suckit Rookit
On Thu, 2011-06-30 at 15:29 -0400, Tanstaafl wrote:
On 2011-06-28 3:40 PM, John Horne wrote:
Correct. So when you then run 'rkhunter --propupd' again it compares the
time value in the rkhunter database against that on the file itself. If
both are the same, then the file hasn't changed since
On 2011-06-30 3:36 PM, John Horne wrote:
You'll need to check your system - perhaps with something like 'locate'
- to see if RKH has been installed more than once.
Nope, there's only one rkhunter.dat:
myhost : Thu Jun 30, 16:03:07 : ~
# locate rkhunter.dat
/var/lib/rkhunter/db/rkhunter.dat
