FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Ubuntu > Ubuntu User

 
 
LinkBack Thread Tools
 
Old 05-11-2012, 12:17 AM
Chris
 
Default chkrootkit

Greetings,

Since Sunday May 6, I am now seeing this when chkrootkit runs.

Searching for Suckit rootkit... Warning: /sbin/init INFECTED

I have read some threads dated 2011 that is is a false-positive.
Anyone else seeing this?


--
Keep well,

Chris

--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
 
Old 05-11-2012, 03:48 AM
Fajar Priyanto
 
Default chkrootkit

On Fri, May 11, 2012 at 8:17 AM, Chris <racerx@makeworld.com> wrote:
> Greetings,
>
> Since Sunday May 6, I am now seeing this when chkrootkit runs.
>
> Searching for Suckit rootkit... *Warning: /sbin/init INFECTED
>
> I have read some threads dated 2011 that is is a false-positive.
> Anyone else seeing this?

Hi Chris,
Maybe you have to upgrade the chrookit?

--
http://linux3.arinet.org

--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
 
Old 05-11-2012, 04:52 AM
"Chris"
 
Default chkrootkit

I'm running 049, I believe that happens to be the latest in the ubu repo.

I run my update once a day. Oddly enough, rkhunter checks the system clean.

Sent from my HTC.

----- Reply message -----
From: "Fajar Priyanto" <fajarpri@arinet.org>
Date: Thu, May 10, 2012 10:48 pm
Subject: chkrootkit
To: "Ubuntu user technical support, not for general discussions" <ubuntu-users@lists.ubuntu.com>

On Fri, May 11, 2012 at 8:17 AM, Chris <racerx@makeworld.com> wrote:
> Greetings,
>
> Since Sunday May 6, I am now seeing this when chkrootkit runs.
>
> Searching for Suckit rootkit... *Warning: /sbin/init INFECTED
>
> I have read some threads dated 2011 that is is a false-positive.
> Anyone else seeing this?

Hi Chris,
Maybe you have to upgrade the chrookit?

--
http://linux3.arinet.org

--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users



--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
 
Old 05-11-2012, 05:40 AM
Chris
 
Default chkrootkit

On 5/11/2012 12:23 AM, Fajar Priyanto wrote:
> On Fri, May 11, 2012 at 12:52 PM, Chris <racerx@makeworld.com> wrote:
>> I'm running 049, I believe that happens to be the latest in the ubu repo.
>>
>> I run my update once a day. Oddly enough, rkhunter checks the system clean.
>
> Do you have "similar" system where you can test if it gives the same result?
>
> Or I can help you testing on a VM. Which Ubuntu version?
>


Here are the bits:

Ubuntu 12.04 LTS (GNU/Linux 3.2.0-24-generic-pae i686)
Actually, running Xubuntu.

chkrootkit -V = chkrootkit version 0.49

rkhunder -V = Rootkit Hunter 1.3.8

apt-get update/upgrade runs once a day (out of habit when I ran Debian SID)

--
Keep well,

Chris

--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
 
Old 05-11-2012, 08:42 PM
NoOp
 
Default chkrootkit

On 05/10/2012 05:17 PM, Chris wrote:
> Greetings,
>
> Since Sunday May 6, I am now seeing this when chkrootkit runs.
>
> Searching for Suckit rootkit... Warning: /sbin/init INFECTED
>
> I have read some threads dated 2011 that is is a false-positive.
> Anyone else seeing this?
>
>

Reported 3 years ago...
https://bugs.launchpad.net/ubuntu/+source/chkrootkit
<https://bugs.launchpad.net/ubuntu/+source/chkrootkit/+bug/454566>
[False positive for SucKit]
Ditto for Redhat:
<https://bugzilla.redhat.com/show_bug.cgi?id=636231>



--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
 

Thread Tools




All times are GMT. The time now is 02:31 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org