Re: rootkit/virus/trojan on squeeze 32 bit
Hi Richard
On 03/13/2013 03:59 AM, Richard Hector wrote:
This was the problem! Thank you very much. I installed prelink looong
time ago (> 3 years). Why do I got this problem suddenly right now,
after so many years? - no idea. Probably some configuration file got
overwritten during update.
So to clarify - there was no rootkit or other compromise; prelink was
modifying the files as intended?
Yes, there was no rootkit or other compromise. prelink was modifying the
files as intended.
I was confused because prelink was installed long time ago and there was
no problem with skype. But suddenly (after Debian and skype update)
skype started to complain about modified binary.
I am not 100% sure how this happen, but I guess it was like that:
Before (3 years ago until now) /etc/prelink.conf had an entry
-b /usr/bin/skype
which prevents prelink from modifying skype binary. Few days ago, during
Debian update /etc/prelink.conf got overwritten by the default
/etc/prelink.conf. After that prelink modified skype binary. Skype has
built-in check for binary modification and starts complaining.
Sorry for noise.
--
Best regards, Sergey Spiridonov
Reply to: