Oto caly log:
Kod: Zaznacz cały
[21:58:10] /usr/sbin/unhide-linux26 [ Warning ]
[21:58:11] Warning: The file '/usr/sbin/unhide-linux26' exists on the system, but it is not present in the rkhunter.dat file.
[22:00:33]
[22:00:33] Checking for rootkits...
[22:00:34] Info: Starting test name 'rootkits'
[22:00:34]
[22:00:34] Performing check of known rootkit files and directories
[22:00:34] Info: Starting test name 'known_rkts'
[22:00:34]
[22:00:34] Checking for 55808 Trojan - Variant A...
[22:00:35] Checking for file '/tmp/.../r' [ Not found ]
[22:00:35] Checking for file '/tmp/.../a' [ Not found ]
[22:07:56] Checking the local host...
[22:07:57] Info: Starting test name 'local_host'
[22:07:57]
[22:07:57] Performing system boot checks
[22:07:57] Info: Starting test name 'startup_files'
[22:07:57] Checking for local host name [ Found ]
[22:07:58] Info: Starting test name 'startup_malware'
[22:07:58] Info: Found local startup file: /etc/rc.local
[22:07:59] Checking for local startup files [ Found ]
[22:08:00] Checking local startup files for malware [ None found ]
[22:08:00] Info: Found system startup directory: /etc/init.d
[22:08:13] Checking system startup files for malware [ None found ]
[22:08:14]
[22:08:14] Performing group and account checks
[22:08:14] Info: Starting test name 'group_accounts'
[22:08:14] Checking for passwd file [ Found ]
[22:08:15] Info: Found password file: /etc/passwd
[22:08:15] Checking for root equivalent (UID 0) accounts [ None found ]
[22:08:16] Info: Found shadow file: /etc/shadow
[22:08:16] Checking for passwordless accounts [ None found ]
[22:08:17] Info: Starting test name 'passwd_changes'
[22:08:17] Checking for passwd file changes [ None found ]
[22:08:18] Info: Starting test name 'group_changes'
[22:08:18] Checking for group file changes [ None found ]
[22:08:19] Checking root account shell history files [ OK ]
[22:08:19]
[22:08:19] Performing system configuration file checks
[22:08:20] Info: Starting test name 'system_configs'
[22:08:20] Checking for SSH configuration file [ Found ]
[22:08:21] Info: Found SSH configuration file: /etc/ssh/sshd_config
[22:08:21] Info: Rkhunter option ALLOW_SSH_ROOT_USER set to 'no'.
[22:08:21] Info: Rkhunter option ALLOW_SSH_PROT_V1 set to '0'.
[22:08:22] Checking if SSH root access is allowed [ Warning ]
[22:08:22] Warning: The SSH and rkhunter configuration options should be the same:
[22:08:23] SSH configuration option 'PermitRootLogin': yes
[22:08:23] Rkhunter configuration option 'ALLOW_SSH_ROOT_USER': no
[22:08:23] Checking if SSH protocol v1 is allowed [ Not allowed ]
[22:08:24] Checking for running syslog daemon [ Found ]
[22:08:25] Checking for syslog configuration file [ Found ]
[22:08:25] Info: Found syslog configuration file: /etc/syslog.conf
[22:08:26] Checking if syslog remote logging is allowed [ Not allowed ]
[22:08:26]
[22:08:26] Performing filesystem checks
[22:08:27] Info: Starting test name 'filesystem'
[22:08:27] Info: SCAN_MODE_DEV set to 'THOROUGH'
[22:09:12] Checking /dev for suspicious file types [ Warning ]
[22:09:12] Warning: Suspicious file types found in /dev:
[22:09:13] /dev/shm/pulse-shm-1011377495: data
[22:09:13] /dev/shm/pulse-shm-623531232: data
[22:09:14] /dev/shm/pulse-shm-1062337689: data
[22:09:14] /dev/shm/pulse-shm-1729415450: data
[22:09:17] Checking for hidden files and directories [ None found ]
[22:13:08]
[22:13:08] Checking application versions...
[22:13:09] Info: Starting test name 'apps'
[22:13:12] Checking version of Exim MTA [ OK ]
[22:13:13] Info: Application 'exim' version '4.69' found.
[22:13:13] Checking version of GnuPG [ OK ]
[22:13:14] Info: Application 'gpg' version '1.4.9' found.
[22:13:14] Info: Application 'httpd' not found.
[22:13:15] Info: Application 'named' not found.
[22:13:15] Checking version of OpenSSL [ OK ]
[22:13:16] Info: Application 'openssl' version '0.9.8g' found.
[22:13:16] Info: Application 'php' not found.
[22:13:17] Info: Application 'procmail' not found.
[22:13:17] Info: Application 'proftpd' not found.
[22:13:18] Checking version of OpenSSH [ OK ]
[22:13:18] Info: Application 'sshd' version '5.1p1' found.
[22:13:18] Info: Applications checked: 4 out of 9
[22:13:19]
[22:13:19] System checks summary
[22:13:19] =====================
[22:13:19]
[22:13:19] File properties checks...
[22:13:20] Files checked: 127
[22:13:20] Suspect files: 2
[22:13:20]
[22:13:20] Rootkit checks...
[22:13:21] Rootkits checked : 110
[22:13:21] Possible rootkits: 0
[22:13:21]
[22:13:21] Applications checks...
[22:13:22] Applications checked: 4
[22:13:22] Suspect applications: 0
[22:13:22]
[22:13:22] The system checks took: 20 minutes and 49 seconds
[22:13:23]
[22:13:23] Info: End date is pon, 16 lut 2009, 22:13:23 CET
