Rkhunter suspicious file types found

Hi, I get the following log several times a day, but I have no idea what I should do. I don't even know if this is a good or bad information. I really appreciate if you guys could explain this to me and let me know how I could fix it. Checking file mirrors. The default value may be 'yes', to allow root access. Last edited by a moderator: Jan 31, Apr 11, 47, 2, Hello You may find the following thread helpful: rkhunter false positive warnings Thank you.

Show hidden low quality content. You must log in or register to reply here. Top Bottom. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register. You're skipping a Very Important Step.

After rkhunter alarms, you must investigate and understand the alarm before you consider removal. Add a comment. Active Oldest Votes. CiscoAcMemoryLock: data seems to be the files used by a previous cisco anyconnect install. Check if you have any instance running, e. Improve this answer. Sign up or log in Sign up using Google. Sign up using Facebook. Sign up using Email and Password. Post as a guest Name.

Email Required, but never shown. The Overflow Blog. Add a comment. Active Oldest Votes. Improve this answer. Mircea Vutcovici Mircea Vutcovici Found this: crw-rw-rw- 1 root root 1, 3 Sep 6 null -rw-r--r-- 1 root root 54 Mar 18 null Thank you!

This is strange as filename. It could be a broken script or maybe a malicious user. Sign up or log in Sign up using Google. Sign up using Facebook. Sign up using Email and Password. Post as a guest Name. Email Required, but never shown. The Overflow Blog.