Clamav tell's me rkhunter is a worm!

Frank Murphy frankly3d at gmail.com
Thu Apr 10 22:08:11 UTC 2014


On Thu, 10 Apr 2014 22:46:56 +0100
John Horne <john.horne at plymouth.ac.uk> wrote:

> On Thu, 2014-04-10 at 09:53 +0100, Frank Murphy wrote:
> > /usr/bin/rkhunter: Osx.Worm.Inqtana-3 FOUND
> > /usr/bin/rkhunter: moved to '/var/cache/clam/rkhunter.001'
> > 
> The ClamAV Inqtana-3 check looks for a couple of phrases (actually
> parts of filenames) which also occur in rkhunter as part of its
> Inqtana checks. I would say the ClamAV check is too simple, whereas
> rkhunter actually tests that the filenames exist.
> 

So If I exclude rkhunter in clamav should be ok.



___
Regards
Frank 
frankly3d.com


More information about the users mailing list