Hello Leif, On Sun, 13 May 2007 10:36:48 +0200 Leif Carlsson <[EMAIL PROTECTED]> wrote: >But rkhunter didn't find it when I searched the server.
>(..) "trimite" and "checkmech" RKH-1.2.9 indeed doesn't. RKH-1.3.0 includes 'suspscan', a "simple" means to scan directories like /tmp and /var/tmp for certain strings that could signal the presence of "malware". It is CPU and I/O intensive, prone to false positives and should not be enabled by default on production servers until tested properly. If you still have the offending files you could help us improve RKH by testing RKH-1.3.0's suspscan on the dir(s) the mech files are in. Regards, unSpawn -- Save thousands by getting out of debt the right way. Click here! http://tagline.hushmail.com/fc/CAaCXv1KVc4HZVtFnUDrneghJeWr3OIl/ ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Rkhunter-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rkhunter-users
