View Full Version : chkrootkit question

April 23rd, 2008, 12:53 AM
I got the following line at the the end of my chkrootkit scan and wondered what it is?

Checking `z2'... user david deleted or never logged from lastlog!

Any advice would be appreciated!

April 23rd, 2008, 01:47 AM
I think its saying there is a new user account that isn't listed from the last time you ran chkrootkit

April 23rd, 2008, 02:23 AM
Would this be because it is a new install and it is the first time I have ran it?

April 23rd, 2008, 07:08 AM
could be

April 23rd, 2008, 07:17 AM
The important question here is did you create or delete user david? if the answer is no, then you need to dig deeper.

April 24th, 2008, 05:35 AM
Yes, I created the user david and is my user profile. I installed Ubuntu at the end of last week. I then installed chkrootkit yesterday.

I am assuming that it is because it was the first time I ran chkrootkit?