Gentoo Forums :: View topic - openrc startup files detected as rootkit ???

openrc startup files detected as rootkit ???

View unanswered posts
View posts from last 24 hours

Gentoo Forums Forum Index

Networking & Security

View previous topic :: View next topic

Author

Message

kernelOfTruth
Watchman

Watchman

Joined: 20 Dec 2005
Posts: 6111
Location: Vienna, Austria; Germany; hello world :)

Posted: Sun May 04, 2008 7:18 pm Post subject: openrc startup files detected as rootkit ???

Reply with quote

Hi there,

I just got

Quote:

[21:09:52] Checking system startup files for malware [ Warning ]
[21:09:53] Warning: Found string 'hidef' in file '/etc/init.d/net.eth4.openrc.bak'. Possible rootkit: Possible part of Knark rootkit
[21:09:53] Warning: Found string 'hidef' in file '/etc/init.d/net.lo'. Possible rootkit: Possible part of Knark rootkit

by a check of rkhunter (1.3.2)

is this anything to worry about ?

thanks
_________________
https://github.com/kernelOfTruth/ZFS-for-SystemRescueCD/tree/ZFS-for-SysRescCD-4.9.0
https://github.com/kernelOfTruth/pulseaudio-equalizer-ladspa

Hardcore Gentoo Linux user since 2004

Send private message

nixnut
Bodhisattva

Bodhisattva

Joined: 09 Apr 2004
Posts: 10974
Location: the dutch mountains

Posted: Sun May 04, 2008 7:53 pm Post subject:

nope, just look at the output of grep -b5 hidef /etc/init.d/net.lo _________________ Please add [solved] to the initial post's subject line if you feel your problem is resolved. Help answer the unanswered talk is cheap. supply exceeds demand

Send private message

kernelOfTruth
Watchman

Watchman

Joined: 20 Dec 2005
Posts: 6111
Location: Vienna, Austria; Germany; hello world :)

Posted: Mon May 05, 2008 5:18 pm Post subject:

Reply with quote

nixnut wrote:

nope, just look at the output of grep -b5 hidef /etc/init.d/net.lo

thanks, nixnut,

that made things clearer :idea:

:idea:

_________________
https://github.com/kernelOfTruth/ZFS-for-SystemRescueCD/tree/ZFS-for-SysRescCD-4.9.0
https://github.com/kernelOfTruth/pulseaudio-equalizer-ladspa

Hardcore Gentoo Linux user since 2004

Send private message

Display posts from previous:

	Gentoo Forums Forum Index Networking & Security	All times are GMT
Page 1 of 1

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Copyright 2001-2025 Gentoo Foundation, Inc. Designed by Kyle Manna © 2003; Style derived from original subSilver theme. | Hosting by Gossamer Threads Inc. © | Powered by phpBB 2.0.23-gentoo-p11 © 2001, 2002 phpBB Group
Privacy Policy