我用的是Rkhunter这个被展示了。
[ Rootkit Hunter version 1.4.2 ]
File updated: searched for 175 files, found 141
baymax@vostro:~$ sudo rkhunter -c --enable all --disable none --rwo
Warning: The following processes are using deleted files:
Process: /sbin/upstart PID: 935 File: /home/baymax/.cache/upstart/at-spi2-registryd.log.1
Process: /usr/lib/i386-linux-gnu/bamf/bamfdaemon PID: 1079 File: /home/baymax/.local/share/gvfs-metadata/root
Process: /usr/bin/unity-scope-loader PID: 1970 File: /home/baymax/.cache/software-center/software-center-agent.db/record.DB
Process: /usr/lib/firefox/firefox PID: 2706 File: /var/tmp/etilqs_ZS8Z4Cd20kgd6uC
Warning: Process '/sbin/wpa_supplicant' (PID 755) is listening on the network.
Warning: Process '/sbin/dhclient' (PID 904) is listening on the network.
Warning: Suspicious file types found in /dev:
/dev/shm/pulse-shm-3832399606: data
/dev/shm/pulse-shm-3456808388: data
/dev/shm/pulse-shm-315771165: data
/dev/shm/pulse-shm-3931089998: data
/dev/shm/pulse-shm-3100407829: data
/dev/shm/pulse-shm-876765117: data
Warning: Hidden file found: /dev/.initramfs: symbolic link to `/run/initramfs'我打开了firefox,并显示了一些广告,因为我忘了安装adbockplus,后来firefox也冻结了一些应用程序。
我听说,恶意软件现在可以自动执行,尽管启用/禁用广告。只是想确保我没有被感染。
谢谢。
复制并粘贴到终端中的命令:
sudo rkhunter --propupd
sudo rkhunter -c --enable all --disable none --rwo发布于 2015-12-08 11:42:29
根据您当前的rkhunter输出,您完全没有问题。对于网络连接和运行的系统来说,所有这些都是完全正常的。
https://askubuntu.com/questions/707300
复制相似问题