Results 1 to 4 of 4

Thread: rkhunter warnings

  1. #1
    Join Date
    Jun 2006
    Location
    USA
    Beans
    151
    Distro
    Kubuntu 12.04 Precise Pangolin

    rkhunter warnings

    Greetings,

    I am running:

    Code:
    [myuserprompt$ uname -a
    Linux my-desktop 2.6.32-24-generic #39-Ubuntu SMP Wed Jul 28 05:14:15 UTC 2010 x86_64 GNU/Linux
     [myuserprompt]$
    When rkhunter runs I get a message (in separate emails):


    Please inspect this machine, because it may be infected.
    and

    Warning: Hidden file found: /dev/.blkid.tab: ASCII text
    Warning: Hidden file found: /dev/.blkid.tab.old: ASCII text

    One or more warnings have been found while checking the system.
    Please check the log file (/var/log/rkhunter.log)
    I checked for this file and it exists, but should be linked to a file in the /etc folder, but it is broken. I was able to do a cat of the files in question, but now they are not found:

    [myprompt]$ ls -la /dev/.blkid.tab
    ls: cannot access /dev/.blkid.tab: No such file or directory
    [myprompt]$

    tried sudo as well files are no longer there. So what to do now? Any suggestions?

    Tia,

    Skaramanger
    M2N-SLI with AMD Phenom II X4 940 8GB of 400Mhz 128bit DDR2 RAM, an Evga GTX560ti Video card Phoenix Bios Rev. 5001

    Kubuntu 12.10 (do-release-upgrade)

  2. #2
    Join Date
    Nov 2005
    Location
    Bordeaux, France
    Beans
    11,297
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: rkhunter warnings

    Quote Originally Posted by skaramanger View Post
    So what to do now?
    Nothing. Those files are harmless.
    「明後日の夕方には帰ってるからね。」


  3. #3
    Join Date
    Mar 2010
    Beans
    8,254
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: rkhunter warnings

    Have you read this?

    http://ubuntuforums.org/showpost.php...49&postcount=8

    Have you run this?

    Code:
     
    rkhunter --update

  4. #4
    Join Date
    Jun 2006
    Location
    USA
    Beans
    151
    Distro
    Kubuntu 12.04 Precise Pangolin

    Re: rkhunter warnings

    Quote Originally Posted by Rubi1200 View Post
    Have you read this?

    http://ubuntuforums.org/showpost.php...49&postcount=8

    Have you run this?

    Code:
     
    rkhunter --update
    No, but I did just now look. I did look at the log file and when I ran rkhunter from the command line it did comeback clean. However, I just want to reiterate that the .blkid.tab file did exist on the /dev folder. I could read it using cat or less. Then I the files were no long there? The link is still there though.

    Thanks for your reply,

    Skaramanger



    I played around with blkid command. I'm satisified.:>
    Last edited by skaramanger; August 6th, 2010 at 12:06 AM. Reason: I am satisfied that blkid.tab is harmless thanks.
    M2N-SLI with AMD Phenom II X4 940 8GB of 400Mhz 128bit DDR2 RAM, an Evga GTX560ti Video card Phoenix Bios Rev. 5001

    Kubuntu 12.10 (do-release-upgrade)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •