While using Firefox lately, I've been getting these random sites attempting load - not pop ups - sometimes I'll get a system message saying it's not a valid destination, other times it just* goes to the URL..* I've installed firestarter, and have ran chkrootkit and rkhunter.* Everything came back looking fine except for the warnings below from the rkhunter log.* I'd like to know what I should do about these, (if anything) and how to do it.
[13:50:03] Performing system configuration file checks
[13:50:03] Info: Starting test name 'system_configs'
[13:50:03]** Checking for SSH configuration file************ [ Found ]
[13:50:03] Info: Found SSH configuration file: /etc/ssh/sshd_config
[13:50:03] Info: Rkhunter option ALLOW_SSH_ROOT_USER set to 'no'.
[13:50:03]** Checking if SSH root access is allowed********* [ Warning ]
[13:50:03] Warning: The SSH and rkhunter configuration options should be the same:
[13:50:03]********* SSH configuration option 'PermitRootLogin': yes
[13:50:03]********* Rkhunter configuration option 'ALLOW_SSH_ROOT_USER': no
[13:50:03]** Checking if SSH protocol v1 is allowed********* [ Not allowed ]
[13:50:03]** Checking for running syslog daemon************* [ Found ]
[13:50:03]** Checking for syslog configuration file********* [ Found ]
[13:50:03] Info: Found syslog configuration file: /etc/syslog.conf
[13:50:03]** Checking if syslog remote logging is allowed*** [ Not allowed ]
[13:50:03]
[13:50:03] Performing filesystem checks
[13:50:03] Info: Starting test name 'filesystem'
[13:50:03] Info: SCAN_MODE_DEV set to 'THOROUGH'
[13:50:19]** Checking /dev for suspicious file types******** [ Warning ]
[13:50:20] Warning: Suspicious files found in /dev:
[13:50:20]********* /dev/shm/pulse-shm-3847722622: data
[13:50:20]** Checking for hidden files and directories****** [ Warning ]
[13:50:20] Warning: Hidden directory found: /etc/.java
System Security
