Results 1 to 4 of 4
  1. #1
    Join Date
    Aug 2004

    Question My server hacked or not, rkhunter log...

    Here I`ll paste few lines from rkhunter log:
    Checking binaries
    * Selftests
    Strings (command) [ BAD ]

    Rootkit Hunter found some bad or unknown hashes. This can be happen due replaced
    binaries or updated packages (which give other hashes). Be sure your hashes are
    fully updated (rkhunter --update). If you're in doubt about these hashes, contact
    the author (fill in the contact form).

    * Suspicious files and malware
    Scanning for known rootkit strings [ BAD ]
    Warning: Found unexpected strings in some files! See logfile for more details

    Result rc.d files check [ Warning! (found unusual things) ]

    This is all, what you think?? My server hacked or... can this be because now I use CentOS 3.5 (OS auto upgraded)??


  2. #2
    Join Date
    Jun 2003
    post/attach the rkhunter.log
    what OS are you using?

  3. #3
    Join Date
    Mar 2003
    California USA
    Does it have the correct release rpm?

    what does

    cat /etc/redhat-release say?

    if it says 3.5... I am going to have to say you are more then likey rooted because otherwise it would say unsupported os if it was rkhunter not having updates since centos 3.5 hasent really had any updates
    Steven Ciaburri | Proactive Linux Server Management -
    Managed Servers (AS62710), Server Management, and Security Auditing.

  4. #4
    Join Date
    Aug 2004
    I back to old kernel (2.4) and all work fine something is not good with new kernel (2.6)....

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts