Hola Gerardo. El 19/02/12 15:05, Gerardo A. Mirkin escribió:
Hola, Corrí rkhunter y aparecen estas líneas que me llevan a sospechar un malware ¿Es así?
Al parecer es un bug del rkhunter. Aquí tienes un enlace por donde empezar: http://lists.alioth.debian.org/pipermail/forensics-devel/2011-July/002907.html
[16:18:40] Warning: The command '/usr/bin/unhide.rb' has been replaced by a script: /usr/bin/unhide.rb: Ruby script, ASCII text Además: 16:21:33] Warning: Hidden directory found: /etc/.java *(¿Cómo lo hago visible a rkhunter para que lo revise?)* [16:21:51] [16:21:51] Info: Test 'apps' disabled at users request. *(¿Cómo habilito la prueba de aplicaciones? Parece deshabilitada por defecto, porque yo no la inhabilité)* [16:21:51] [16:21:51] System checks summary [16:21:51] ===================== [16:21:51] [16:21:51] File properties checks... [16:21:51] Files checked: 137 [16:21:51] Suspect files: 1 [16:21:51] [16:21:51] Rootkit checks... [16:21:51] Rootkits checked : 242 [16:21:51] Possible rootkits: 1 [16:21:51] Rootkit names : Xzibit Rootkit [16:21:51] [16:21:51] Applications checks... [16:21:51] All checks skipped [16:21:51] [16:21:51] The system checks took: 4 minutes and 1 second [16:21:52] [16:21:52] Info: End date is dom feb 19 16:21:52 ART 2012 Gracias por sus respuestas. Saludos, Gerardo
Saludos Juan Lavieri -- To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4f4247bc.10...@gmail.com