LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 07-08-2005, 06:30 PM   #1
Dave Lerner
Member
 
Registered: May 2005
Location: Virginia, USA
Distribution: MEPIS, Ubuntu
Posts: 39

Rep: Reputation: 16
chkrootkit - suspicious files and dirs


Here's a portion of the output from chkrootkit:

Quote:
...
Searching for RH-Sharpe's default files... nothing found
Searching for Ambient's rootkit (ark) default files and dirs... nothing found
Searching for suspicious files and dirs, it may take a while...
/usr/lib/j2se/1.4/jre/.systemPrefs /usr/lib/j2se/1.4/jre/.systemPrefs/.system.lock /usr/lib/j2se/1.4/jre/.systemPrefs/.systemRootModFile /usr/lib/blender/.Blanguages /usr/lib/blender/.bfont.ttf
/usr/lib/j2se/1.4/jre/.systemPrefs

Searching for LPD Worm files and dirs... nothing found
Searching for Ramen Worm files and dirs... nothing found
...
Are the entries listed as "suspicious files and dirs" something I should be concerned about?
 
Old 07-08-2005, 06:50 PM   #2
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 57
Not usually. Anything outside of the user home directories that has a filename beginning with a "." (aka a hidden file) is automatically flagged as suspicious by chkrootkit. For some reason alot of the java libs are named that way which is annoying but harmless. It's still a good idea to visually inspect these files though, just in case.
 
Old 07-09-2005, 08:49 AM   #3
Dave Lerner
Member
 
Registered: May 2005
Location: Virginia, USA
Distribution: MEPIS, Ubuntu
Posts: 39

Original Poster
Rep: Reputation: 16
Thanks.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
invisible files and dirs karmine Slackware - Installation 8 12-26-2004 03:05 PM
Canīt see certain files/dirs in debian partition jimdaworm Slackware 2 10-11-2004 06:54 AM
ls, dirs first, files later TroelsSmit Linux - Newbie 4 05-31-2004 11:47 AM
PERL::evaluating names of files and dirs ocularbob Programming 5 08-28-2003 06:26 PM
Cmd to rm dir thats has files and other dirs psyklops Linux - General 4 04-17-2002 08:12 PM


All times are GMT -5. The time now is 01:26 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration