Normal Chkrootkit output??

Discussion in 'HOWTO-Related Questions' started by trcinc1, May 27, 2009.

  1. trcinc1

    trcinc1 New Member HowtoForge Supporter

    I just started noticing this output from chkrootkit.

    Is this normal? The issue appears right after: 'Searching for suspect PHP files...' A few pages later it continues as normal.

    Searching for ESRK rootkit default files... nothing found
    Searching for rootedoor... nothing found
    Searching for ENYELKM rootkit default files... nothing found
    Searching for common ssh-scanners default files... nothing found
    Searching for suspect PHP files...
    PMA_token |s:32:"597feec2b25e984af078476a65626e4d";PMA_Config|O:10:"PMA_Config":10:{s:14:"default_source";s:30:"./libraries/config.defaul
    st";i:100;s:12:"MaxTableList";i:2 (snip)

    _timezone_get() [<a href=''></a>]: It is not safe to rely on the syste
    m's timezone settings. Please use the date.timezone setting, the TZ environment variable or the date_default_timezone_set() function. In c
    ase you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected
    'America/Denver' for 'MDT/-6.0/DST' instead";s:16:"*_is_displayed";b:0;s:10:"*_params";a:0:{}s:18:"*_added_messages";a:0:{}}s:32:"a27802b6
    Searching for anomalies in shell history files... nothing found
    Checking `asp'... not infected (snip)

    I am using Debian Lenny - Chkrookit 0.48.

    Any ideas??
  2. falko

    falko Super Moderator ISPConfig Developer

    I wouldn't worry about this. It seems as if chkrootkit doesn't know how to handle the phpMyAdmin package.
  3. trcinc1

    trcinc1 New Member HowtoForge Supporter

    Sounds great.

    I just noticed the same output on a "Test Server" which was just built - So I was thinking it was something just throwing off chkrootkit.

    Thanks again.


Share This Page