Chkrootkit

[nick65]

Salve,

O istallato chkrootkit e poi o fatto una scansione.
Questo e il risultato, volevo sapere se c'è da preoccupare.  :-\

Searching for Ambient's rootkit (ark) default files and dirs... nothing found
Searching for suspicious files and dirs, it may take a while... The following suspicious files and directories were found: 
/usr/lib/jvm/.java-6-openjdk.jinfo /usr/lib/thunderbird-3.0.8/.autoreg /usr/lib/pymodules/python2.6/.path /usr/lib/pymodules/python2.6/PyQt4/uic/widget-plugins/.noinit /usr/lib/xulrunner-1.9.2.10/.autoreg /usr/lib/firefox-3.6.10/.autoreg

Checking `rexedcs'...                                      not found
Checking `sniffer'...                                      lo: not promisc and no packet sniffer sockets
wlan0: PACKET SNIFFER(/sbin/wpa_supplicant[1212], /sbin/dhclient3[2165])
Checking `w55808'...                                        not infected
Checking `wted'...                                          chkwtmp: nothing deleted
Checking `scalper'...                                      not infected
Checking `slapper'...                                      not infected
Checking `z2'...                                            user nick deleted or never logged from lastlog!
Checking `chkutmp'...                                      chkutmp: nothing deleted
Checking `OSX_RSPLUG'...                                    not infected

[il_muflone]

ti sta dicendo che non ha trovato niente e ti ha segnalato una serie di files nascosti.
non c'e` niente di cui preoccuparsi, ignorali

[nick65]

Grazie per la risposta rapidissima...
ho scaricato per curiosità pure rkhunter è l'ho usato.
Qui sotto o evidenziato ciò che non riesco a decifrare.

[20:41:59]
[20:41:59] Performing trojan specific checks
[20:41:59] Info: Starting test name 'trojans'
[20:41:59]  Checking for enabled inetd services            [ Skipped ]
[20:41:59] Info: Check skipped - file '/etc/inetd.conf' does not exist.
[20:41:59]
[20:41:59]  Performing check for enabled xinetd services
[20:41:59]  Checking for enabled xinetd services            [ Skipped ]
[20:41:59] Info: Check skipped - file '/etc/xinetd.conf' does not exist.
[20:41:59] Info: Apache backdoor check skipped: Apache modules and configuration directories not found.
[20:42:00]


[20:42:05] Info: Test 'packet_cap_apps' disabled at users request.
[20:42:08]
[20:42:08] Checking the local host...
[20:42:08] Info: Starting test name 'local_host'
[20:42:08]
[20:42:08] Performing system boot checks
[20:42:08] Info: Starting test name 'startup_files'
[20:42:08]  Checking for local host name                    [ Found ]
[20:42:08] Info: Starting test name 'startup_malware'
[20:42:08]  Checking for system startup files              [ Found ]
[20:42:09]  Checking system startup files for malware      [ None found ]
[20:42:09]
[20:42:09] Performing group and account checks
[20:42:09] Info: Starting test name 'group_accounts'
[20:42:09]  Checking for passwd file                        [ Found ]
[20:42:09] Info: Found password file: /etc/passwd
[20:42:09]  Checking for root equivalent (UID 0) accounts  [ None found ]

[20:42:09] Info: Starting test name 'system_configs'
[20:42:09]  Checking for SSH configuration file            [ Not found ]
[20:42:09]  Checking for running syslog daemon              [ Found ]
[20:42:09]  Checking for syslog configuration file          [ Found ]
[20:42:09] Info: Found syslog configuration file: /etc/rsyslog.conf
[20:42:09]  Checking if syslog remote logging is allowed    [ Not allowed ]
[20:42:09]
[20:42:09] Performing filesystem checks
[20:42:09] Info: Starting test name 'filesystem'
[20:42:09] Info: SCAN_MODE_DEV set to 'THOROUGH'
[20:42:10]  Checking /dev for suspicious file types        [ Warning ]

[il_muflone]

non vedo nulla di evidenziato ne` avvisi
togliti dalla testa l'idea dei virus su linux

[nick65]

Ciao

Io ho letto su una rivista specializzata in Ubuntu, che rkhunter e chkrootkit non controllino i virus ma malware e rootkit, che sembrerebbero più pericolosi. Per i virus o attivato Gufw e uso Clam TK antivirus.

[il_muflone]

fai conto che non esistano perche` ad oggi non ce ne sono di reali