**Hi!
Could these changes indicate that my box is compromised? * System tools Performing 'known good' check... /bin/cat [ BAD ] /bin/chmod [ OK ] /bin/chown [ OK ] /bin/date [ OK ] /bin/dmesg [ OK ] /bin/grep [ OK ] /bin/kill [ BAD ] /bin/login [ OK ] /bin/ls [ OK ] /bin/more [ OK ] /bin/mount [ OK ] /bin/netstat [ BAD ] /bin/ps [ OK ] /bin/su [ OK ] /sbin/depmod [ BAD ] /sbin/ifconfig [ OK ] /sbin/init [ OK ] /sbin/insmod [ BAD ] /sbin/ip [ BAD ] /sbin/modinfo [ BAD ] /sbin/runlevel [ OK ] /sbin/sulogin [ OK ] /sbin/sysctl [ OK ] /usr/bin/chattr [ OK ] /usr/bin/find [ OK ] /usr/bin/lsattr [ OK ] /usr/bin/md5sum [ OK ] /usr/bin/passwd [ OK ] /usr/bin/sha1sum [ NA ] /usr/bin/stat [ OK ] /usr/bin/top [ OK ] /usr/bin/vmstat [ OK ] /usr/bin/w [ OK ] /usr/bin/wc [ OK ] /usr/bin/who [ OK ] /usr/bin/whoami [ OK ] ****-------------------------------------------------------------------------------- Rootkit Hunter has found some bad or unknown hashes. This can happen due to replaced binaries or updated packages (which give other hashes). Be sure your hashes are up-to-date (rkhunter --update). If you are in doubt about these hashes, contact us through the Rootkit Hunter mailing list at [email protected] <mailto:[email protected]> --------------------------------------------------------------------------------** ** ** ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier. Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Rkhunter-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rkhunter-users
