[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

rkhunter detecta algo ¿sospechoso o peligroso?



Hola,
Corrí rkhunter y aparecen estas líneas que me llevan a sospechar un malware ¿Es así?

[16:18:40] Warning: The command '/usr/bin/unhide.rb' has been replaced by a script: /usr/bin/unhide.rb: Ruby script, ASCII text

Además:

16:21:33] Warning: Hidden directory found: /etc/.java  (¿Cómo lo hago visible a rkhunter para que lo revise?)
[16:21:51]
[16:21:51] Info: Test 'apps' disabled at users request. (¿Cómo habilito la prueba de aplicaciones? Parece deshabilitada por defecto, porque yo no la inhabilité)
[16:21:51]
[16:21:51] System checks summary
[16:21:51] =====================
[16:21:51]
[16:21:51] File properties checks...
[16:21:51] Files checked: 137
[16:21:51] Suspect files: 1
[16:21:51]
[16:21:51] Rootkit checks...
[16:21:51] Rootkits checked : 242
[16:21:51] Possible rootkits: 1
[16:21:51] Rootkit names    : Xzibit Rootkit
[16:21:51]
[16:21:51] Applications checks...
[16:21:51] All checks skipped
[16:21:51]
[16:21:51] The system checks took: 4 minutes and 1 second
[16:21:52]
[16:21:52] Info: End date is dom feb 19 16:21:52 ART 2012


Gracias por sus respuestas. Saludos,
Gerardo

Reply to: