-
Senior Member
registered user

Originally Posted by
E-Tramp
The following suspicious files and directories were found:
Leaving out the part that's NOT suspicious...
Code:
I've re-formatted the 'suspicious' part of your file in post #1:
root@Microknoppix:/home/knoppix# sudo chkrootkit
Searching for suspicious files and dirs, it may take a while... The following suspicious files and directories were found:
/usr/lib/jvm/.java-1.6.0-openjdk-i386.jinfo
/usr/lib/mono/xbuild-frameworks/.NETFramework
/usr/lib/debug/.build-id
/usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/.settings
/usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/profileRegistry/PlatformProfile.profile/.data
/usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/profileRegistry/PlatformProfile.profile/.data/.settings
/usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/profileRegistry/PlatformProfile.profile/.lock
/usr/lib/eclipse/dropins/jdt/plugins/org.eclipse.jdt.debug_3.7.1.dist/.api_description
/usr/lib/eclipse/dropins/sdk/plugins/org.eclipse.pde.build_3.7.0.dist/.api_description
/usr/lib/eclipse/dropins/sdk/plugins/org.eclipse.pde.build_3.7.0.dist/.options /usr/lib/eclipse/.eclipseproduct
/usr/lib/eclipse/configuration/org.eclipse.osgi/bundles/28/1/.cp
/usr/lib/eclipse/configuration/org.eclipse.osgi/bundles/147/1/.cp
/usr/lib/eclipse/plugins/org.eclipse.ui.intro.universal_3.2.500.dist/.api_description
/usr/lib/eclipse/plugins/org.eclipse.ui.intro.universal_3.2.500.dist/.options
/usr/lib/eclipse/plugins/org.eclipse.core.runtime.compatibility.registry_3.5.0.dist/.api_description
/usr/lib/eclipse/plugins/org.eclipse.ui.workbench.compatibility_3.2.100.dist/.api_description
/usr/lib/xulrunner-1.9.1/.autoreg /usr/lib/python2.6/dist-packages/PyQt4/uic/widget-plugins/.noinit
/usr/lib/python2.7/dist-packages/PyQt4/uic/widget-plugins/.noinit /usr/lib/pymodules/python2.6/.path
/usr/lib/pymodules/python2.7/.path /usr/lib/icedove/.autoreg /lib/init/rw/.mdadm
/usr/lib/mono/xbuild-frameworks/.NETFramework
/usr/lib/debug/.build-id
/usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/.settings
/usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/profileRegistry/PlatformProfile.profile/.data
/usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/profileRegistry/PlatformProfile.profile/.data/.settings
/usr/lib/eclipse/configuration/org.eclipse.osgi/bundles/28/1/.cp
/usr/lib/eclipse/configuration/org.eclipse.osgi/bundles/147/1/.cp
/lib/init/rw/.mdadm
I don't know what it all means, but .NET is only part of what you've been told is suspicious.
Everything seems to be in either /usr/lib or /lib.
Start here, I guess.
a. what is eclipse, anyway.
b. what is .mdadm good for
c. etc...
Last edited by utu; 03-08-2014 at 03:42 AM.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules

DEC PDP-11/34 Front Panel Complete PDP11 RARE
$450.00

Vintage Intel Mainframe Server MCM CPU Substrate Lot Prototyping PGA Validation
$500.00

HP 5060-8359 8K Semiconductor Memory Module 5080-9747 Vintage HP Computer
$224.72

HP 13210-60001 Disc Drive Interface PCB HP 7900A 7901A Vintage
$225.61

Vtg IBM Mainframe Prototype Chip Module Lot 146 pc 1988-1993 ES/9000 Lab Arcive
$649.00

Vintage Mainframe Computer Disk Drive Pack Dyson SMD 5 Level Disks
$79.00

Computer Tape Reel 1600 BPI 9 Track Vintage Mainframe LOT OF 2 WITH BOX
$89.95

Commodore 64 PC with Model 1541 Diskette Drive and Flight Simulator II *READ*
$199.99

Vintage Telex 952003-112 Mechanical Terminal Keyboard IBM 3270 Mainframe DB25
$799.00

IBM 3274-51C Controller 3270 mainframe 8" floppy tested to power on
$500.00