Results 1 to 3 of 3

Thread: LiveDVD shows warnings and possible rootkits

  1. #1

    Question LiveDVD shows warnings and possible rootkits

    Hi there, I have downloaded Knoppix DVDv7.0.1 and used it to boot my laptop. I have run the rkhunter command and it shows lots of warnings and possible rootkits. Is this normal for a liveDVD or is something else? I am new to knoppix.

    This is a summary of the output System checks summary

    [13:39:30] ===================== [13:39:30] [13:39:30] File properties checks... [13:39:30] Required commands check failed [13:39:30] Files checked: 193 [13:39:30] Suspect files: 151 [13:39:30] [13:39:30] Rootkit checks... [13:39:30] Rootkits checked : 251 [13:39:30] Possible rootkits: 2 [13:39:30] Rootkit names : Rootkit component, Xzibit Rootkit [13:39:30] [13:39:30] Applications checks... [13:39:30] All checks skipped [13:39:30] [13:39:30] The system checks took: 3 minutes and 42 seconds [13:39:30] [13:39:30] Info: End date is Sun Jul 15 13:39:30 UTC 2012

    Cheers
    Last edited by Werner P. Schulz; 07-15-2012 at 09:02 AM. Reason: formatted by moderator

  2. #2
    Moderator Moderator
    Join Date
    Nov 2010
    Location
    Germany/ Dietzenbach
    Posts
    1,124
    Before trying a tool like rkhunter please learn how to use it and especially all about "Intrusion Procedure"

    http://sourceforge.net/apps/trac/rkhunter/wiki/SPRKH

  3. #3

    Thumbs up Thank you

    Quote Originally Posted by Werner P. Schulz View Post
    Before trying a tool like rkhunter please learn how to use it and especially all about "Intrusion Procedure"

    http://sourceforge.net/apps/trac/rkhunter/wiki/SPRKH

    Thank you Werner for the link. I see that rkhunter is more than a simple scanner. The warnings were about mismatched checksums for some files and applications, but the checksum for Knoppix iso was ok. That was a bit of a puzzle for me. I have lots to learn, now that I have made the switch from "point, click and don't need to know" OS to Linux.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


Cisco SG110 24 Port Gigabit Ethernet Switch w/ 2 x SFP SG110-24 picture

Cisco SG110 24 Port Gigabit Ethernet Switch w/ 2 x SFP SG110-24

$117.00



1783-SFP1GTE  AB 1G copper SFP #ZYPL picture

1783-SFP1GTE AB 1G copper SFP #ZYPL

$879.87



Genuine Cisco SFP-10G-SR V03 10GBASE-SR SFP+ Transceiver Module 10-2415-03  picture

Genuine Cisco SFP-10G-SR V03 10GBASE-SR SFP+ Transceiver Module 10-2415-03

$8.00



NEW Sealed Cisco SFP-10G-LR 10GBASE-LR SFP+ 1310nm 10km *US Shipping* picture

NEW Sealed Cisco SFP-10G-LR 10GBASE-LR SFP+ 1310nm 10km *US Shipping*

$18.00



Cisco SFP-10G-LR-S SFP+ 1310nm 10km DOM Transceiver Module 10-3107-01 - 1 Year  picture

Cisco SFP-10G-LR-S SFP+ 1310nm 10km DOM Transceiver Module 10-3107-01 - 1 Year

$41.59



Genuine Cisco ‎SFP-10G-SR Transceiver Module (10-2415-03) picture

Genuine Cisco ‎SFP-10G-SR Transceiver Module (10-2415-03)

$5.65



LOT OF 20 Genuine Cisco SFP-10G-SR V03 10GBASE-SR SFP+ Transceiver Module picture

LOT OF 20 Genuine Cisco SFP-10G-SR V03 10GBASE-SR SFP+ Transceiver Module

$89.00



Cisco Meraki MA-SFP-10GB-SR 10G SFP+ SR 850nm 300m LC MMF picture

Cisco Meraki MA-SFP-10GB-SR 10G SFP+ SR 850nm 300m LC MMF

$29.99