Results 1 to 7 of 7

Thread: chkrootkit scan

Threaded View

  1. #4
    Senior Member registered user
    Join Date
    May 2006
    Location
    Columbia, Maryland USA
    Posts
    1,631
    Quote Originally Posted by E-Tramp View Post
    The following suspicious files and directories were found:
    Leaving out the part that's NOT suspicious...

    Code:
    I've re-formatted the 'suspicious' part of your file in post #1:
    
    root@Microknoppix:/home/knoppix# sudo chkrootkit
    Searching for suspicious files and dirs, it may take a while... The following suspicious files and directories were found:  
    /usr/lib/jvm/.java-1.6.0-openjdk-i386.jinfo 
    /usr/lib/mono/xbuild-frameworks/.NETFramework
    /usr/lib/debug/.build-id 
    /usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/.settings 
    /usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/profileRegistry/PlatformProfile.profile/.data 
    /usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/profileRegistry/PlatformProfile.profile/.data/.settings 
    /usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/profileRegistry/PlatformProfile.profile/.lock
    /usr/lib/eclipse/dropins/jdt/plugins/org.eclipse.jdt.debug_3.7.1.dist/.api_description 
    /usr/lib/eclipse/dropins/sdk/plugins/org.eclipse.pde.build_3.7.0.dist/.api_description 
    /usr/lib/eclipse/dropins/sdk/plugins/org.eclipse.pde.build_3.7.0.dist/.options /usr/lib/eclipse/.eclipseproduct
    /usr/lib/eclipse/configuration/org.eclipse.osgi/bundles/28/1/.cp 
    /usr/lib/eclipse/configuration/org.eclipse.osgi/bundles/147/1/.cp 
    /usr/lib/eclipse/plugins/org.eclipse.ui.intro.universal_3.2.500.dist/.api_description 
    /usr/lib/eclipse/plugins/org.eclipse.ui.intro.universal_3.2.500.dist/.options 
    /usr/lib/eclipse/plugins/org.eclipse.core.runtime.compatibility.registry_3.5.0.dist/.api_description 
    /usr/lib/eclipse/plugins/org.eclipse.ui.workbench.compatibility_3.2.100.dist/.api_description 
    /usr/lib/xulrunner-1.9.1/.autoreg /usr/lib/python2.6/dist-packages/PyQt4/uic/widget-plugins/.noinit
    /usr/lib/python2.7/dist-packages/PyQt4/uic/widget-plugins/.noinit /usr/lib/pymodules/python2.6/.path 
    /usr/lib/pymodules/python2.7/.path /usr/lib/icedove/.autoreg /lib/init/rw/.mdadm
    /usr/lib/mono/xbuild-frameworks/.NETFramework 
    /usr/lib/debug/.build-id 
    /usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/.settings 
    /usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/profileRegistry/PlatformProfile.profile/.data 
    /usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/profileRegistry/PlatformProfile.profile/.data/.settings
    /usr/lib/eclipse/configuration/org.eclipse.osgi/bundles/28/1/.cp
    /usr/lib/eclipse/configuration/org.eclipse.osgi/bundles/147/1/.cp
    /lib/init/rw/.mdadm
    I don't know what it all means, but .NET is only part of what you've been told is suspicious.
    Everything seems to be in either /usr/lib or /lib.
    Start here, I guess.
    a. what is eclipse, anyway.
    b. what is .mdadm good for
    c. etc...
    Last edited by utu; 03-08-2014 at 03:42 AM.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


DEC PDP-11/34 Front Panel Complete PDP11 RARE picture

DEC PDP-11/34 Front Panel Complete PDP11 RARE

$450.00



Vintage Intel Mainframe Server MCM CPU Substrate Lot Prototyping PGA Validation picture

Vintage Intel Mainframe Server MCM CPU Substrate Lot Prototyping PGA Validation

$500.00



HP 5060-8359 8K Semiconductor Memory Module 5080-9747 Vintage HP Computer picture

HP 5060-8359 8K Semiconductor Memory Module 5080-9747 Vintage HP Computer

$224.72



HP 13210-60001 Disc Drive Interface PCB HP 7900A 7901A Vintage picture

HP 13210-60001 Disc Drive Interface PCB HP 7900A 7901A Vintage

$225.61



Vtg IBM Mainframe Prototype Chip Module Lot 146 pc 1988-1993 ES/9000 Lab Arcive picture

Vtg IBM Mainframe Prototype Chip Module Lot 146 pc 1988-1993 ES/9000 Lab Arcive

$649.00



Vintage Mainframe Computer Disk Drive Pack Dyson SMD 5 Level Disks picture

Vintage Mainframe Computer Disk Drive Pack Dyson SMD 5 Level Disks

$79.00



Computer Tape Reel 1600 BPI 9 Track Vintage Mainframe LOT OF 2 WITH BOX picture

Computer Tape Reel 1600 BPI 9 Track Vintage Mainframe LOT OF 2 WITH BOX

$89.95



Commodore 64 PC with Model 1541 Diskette Drive and Flight Simulator II *READ* picture

Commodore 64 PC with Model 1541 Diskette Drive and Flight Simulator II *READ*

$199.99



Vintage Telex 952003-112 Mechanical Terminal Keyboard IBM 3270 Mainframe DB25 picture

Vintage Telex 952003-112 Mechanical Terminal Keyboard IBM 3270 Mainframe DB25

$799.00



IBM 3274-51C Controller 3270 mainframe 8

IBM 3274-51C Controller 3270 mainframe 8" floppy tested to power on

$500.00