0

I have a server with Ubuntu 9.10 and rkhunter 1.3.6 installed.Today I have received a mail with next warning:"Found string 'hdparm' in file '/etc/init.d/bootlogd'. Possible rootkit: Xzibit Rootkit"How I check if this is true?
Thanks.

1 answers, 0 votes, 894 views
Submit Answer
JSimR's picture
 asked by Juan Simón
32 weeks 3 days ago

1 Answers

Answer
0

Here is the details of how to fix it from rootkit hunters mailing list...
 
http://sourceforge.net/mailarchive/forum.php?forum_name=rkhunter-users&m...
http://sourceforge.net/mailarchive/forum.php?thread_name=20091204165435....
 
Hope this helps.

Visitor's picture
 answer by Visitor
31 weeks 6 days ago

Asked by

Juan Simón's picture
Juan Simón
User offline. Last seen 22 weeks 5 hours ago. Offline
joined 32 weeks 3 days ago
30 points

View in your own language!