On Tue, Sep 28, 2010 at 7:34 PM, Paul Stear <gen...@appjaws.plus.com> wrote: > Hi all, > rkhunter runs every day and reports the following:- > > System checks summary > ===================== > > File properties checks... > Files checked: 142 > Suspect files: 141 > > Rootkit checks... > Rootkits checked : 246 > Possible rootkits: 2 > Rootkit names : Xzibit Rootkit, Dica-Kit Rootkit > > Any idea how I find and remove these Rootkits?
FYI, some info about Dica-Kit from Sophos: http://www.sophos.com/security/analyses/viruses-and-spyware/trojdicakit.html and a quick google search about Xzibit seems to say that rkhunter often give false positive for Xzibit. You might want to research about Xzibit, and assess whether or not your case is false positive.
