Results 1 to 3 of 3

Thread: LiveDVD shows warnings and possible rootkits

  1. #1

    Question LiveDVD shows warnings and possible rootkits

    Hi there, I have downloaded Knoppix DVDv7.0.1 and used it to boot my laptop. I have run the rkhunter command and it shows lots of warnings and possible rootkits. Is this normal for a liveDVD or is something else? I am new to knoppix.

    This is a summary of the output System checks summary

    [13:39:30] ===================== [13:39:30] [13:39:30] File properties checks... [13:39:30] Required commands check failed [13:39:30] Files checked: 193 [13:39:30] Suspect files: 151 [13:39:30] [13:39:30] Rootkit checks... [13:39:30] Rootkits checked : 251 [13:39:30] Possible rootkits: 2 [13:39:30] Rootkit names : Rootkit component, Xzibit Rootkit [13:39:30] [13:39:30] Applications checks... [13:39:30] All checks skipped [13:39:30] [13:39:30] The system checks took: 3 minutes and 42 seconds [13:39:30] [13:39:30] Info: End date is Sun Jul 15 13:39:30 UTC 2012

    Cheers
    Last edited by Werner P. Schulz; 07-15-2012 at 09:02 AM. Reason: formatted by moderator

  2. #2
    Moderator Moderator
    Join Date
    Nov 2010
    Location
    Germany/ Dietzenbach
    Posts
    1,124
    Before trying a tool like rkhunter please learn how to use it and especially all about "Intrusion Procedure"

    http://sourceforge.net/apps/trac/rkhunter/wiki/SPRKH

  3. #3

    Thumbs up Thank you

    Quote Originally Posted by Werner P. Schulz View Post
    Before trying a tool like rkhunter please learn how to use it and especially all about "Intrusion Procedure"

    http://sourceforge.net/apps/trac/rkhunter/wiki/SPRKH

    Thank you Werner for the link. I see that rkhunter is more than a simple scanner. The warnings were about mismatched checksums for some files and applications, but the checksum for Knoppix iso was ok. That was a bit of a puzzle for me. I have lots to learn, now that I have made the switch from "point, click and don't need to know" OS to Linux.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


Cisco Catalyst C9300-24UX-A 24 Port 10G/mGig UPOE Network Switch, no module picture

Cisco Catalyst C9300-24UX-A 24 Port 10G/mGig UPOE Network Switch, no module

$379.97



Cisco STACK-T4-3M Stacking Cable New Sealed picture

Cisco STACK-T4-3M Stacking Cable New Sealed

$149.00



Cisco WS-C3850 48 Port Gigabit PoE+ Switch C3850-NM-2-10G 1100W picture

Cisco WS-C3850 48 Port Gigabit PoE+ Switch C3850-NM-2-10G 1100W

$89.99



Cisco WS-C3850-48P-S  Catalyst 48 Port 1GB PoE+ RJ-45 Switch - Same Day Shipping picture

Cisco WS-C3850-48P-S Catalyst 48 Port 1GB PoE+ RJ-45 Switch - Same Day Shipping

$155.00



Cisco WS-C3850-48P-L 48-Port Gigabit 3850 PoE Switch w/ 715W+ C3850-NM-4-1G Mod picture

Cisco WS-C3850-48P-L 48-Port Gigabit 3850 PoE Switch w/ 715W+ C3850-NM-4-1G Mod

$89.00



Cisco C3850-NM-2-10G 2 Port Network Exp.Module for 3850 picture

Cisco C3850-NM-2-10G 2 Port Network Exp.Module for 3850

$38.99



Genuine Cisco SFP-10G-SR V03 10GBASE-SR SFP+ Transceiver Module 10-2415-03  picture

Genuine Cisco SFP-10G-SR V03 10GBASE-SR SFP+ Transceiver Module 10-2415-03

$8.00



(Lot of 10) Cisco SFP-10G-SR SFP+ Transceiver Module 10-2415-03 picture

(Lot of 10) Cisco SFP-10G-SR SFP+ Transceiver Module 10-2415-03

$40.00



32 Port 40GbE QSFP+ Cisco Nexus Enterprise Layer 3 VXLAN Switch Dual PSU picture

32 Port 40GbE QSFP+ Cisco Nexus Enterprise Layer 3 VXLAN Switch Dual PSU

$149.00



Cisco Catalyst C9300-24UX-A 24 Port 10G/mGig Copper UPOE Network Switch picture

Cisco Catalyst C9300-24UX-A 24 Port 10G/mGig Copper UPOE Network Switch

$449.00