Thread: rkhunter report
View Single Post
  #2  
Old 7th October 2010, 11:20
damir damir is offline
Senior Member
 
Join Date: Jun 2006
Posts: 375
Thanks: 11
Thanked 51 Times in 42 Posts
Default

Which distributon are you using?

Debian was updated to 5.0.6 but those file listed there have not been updated. It looks like some have been modified.

You can try to update rkhunter database:

rkhunter --update

Than do another scan, if rkhunter shows same error than i would advised you to take down the server and inspected without it been connected to network.

The best solution is to reinstall the server an re import backup. Because you never know tha intruder have done to system.
Reply With Quote