OSX_RSPLUG ubuntu 18.04tls rootkit found on chkrootkit











up vote
-1
down vote

favorite
1












Look like rookit.



Is there a removal or wipe and reimage? See screenshot.



enter image description here










share|improve this question









New contributor




LinuxNut is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.




















  • Research here: security.stackexchange.com/search?q=chkrootkit
    – jdv
    Nov 22 at 16:33










  • Why do you think you are effected? The output only says OSX_RSPLUG not tested. No warning! Take a look at the /var/log/rkhunter.logfile. --> eg sudo less /var/log/rkhunter.log
    – abu_bua
    Nov 22 at 23:11










  • Welcome to Ask Ubuntu! Please format your post in a proper way - use plain text instead of images!
    – abu_bua
    Nov 22 at 23:12















up vote
-1
down vote

favorite
1












Look like rookit.



Is there a removal or wipe and reimage? See screenshot.



enter image description here










share|improve this question









New contributor




LinuxNut is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.




















  • Research here: security.stackexchange.com/search?q=chkrootkit
    – jdv
    Nov 22 at 16:33










  • Why do you think you are effected? The output only says OSX_RSPLUG not tested. No warning! Take a look at the /var/log/rkhunter.logfile. --> eg sudo less /var/log/rkhunter.log
    – abu_bua
    Nov 22 at 23:11










  • Welcome to Ask Ubuntu! Please format your post in a proper way - use plain text instead of images!
    – abu_bua
    Nov 22 at 23:12













up vote
-1
down vote

favorite
1









up vote
-1
down vote

favorite
1






1





Look like rookit.



Is there a removal or wipe and reimage? See screenshot.



enter image description here










share|improve this question









New contributor




LinuxNut is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











Look like rookit.



Is there a removal or wipe and reimage? See screenshot.



enter image description here







rootkit chkrootkit






share|improve this question









New contributor




LinuxNut is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











share|improve this question









New contributor




LinuxNut is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









share|improve this question




share|improve this question








edited Nov 22 at 23:07









abu_bua

3,05381023




3,05381023






New contributor




LinuxNut is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









asked Nov 22 at 16:04









LinuxNut

1




1




New contributor




LinuxNut is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.





New contributor





LinuxNut is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.






LinuxNut is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.












  • Research here: security.stackexchange.com/search?q=chkrootkit
    – jdv
    Nov 22 at 16:33










  • Why do you think you are effected? The output only says OSX_RSPLUG not tested. No warning! Take a look at the /var/log/rkhunter.logfile. --> eg sudo less /var/log/rkhunter.log
    – abu_bua
    Nov 22 at 23:11










  • Welcome to Ask Ubuntu! Please format your post in a proper way - use plain text instead of images!
    – abu_bua
    Nov 22 at 23:12


















  • Research here: security.stackexchange.com/search?q=chkrootkit
    – jdv
    Nov 22 at 16:33










  • Why do you think you are effected? The output only says OSX_RSPLUG not tested. No warning! Take a look at the /var/log/rkhunter.logfile. --> eg sudo less /var/log/rkhunter.log
    – abu_bua
    Nov 22 at 23:11










  • Welcome to Ask Ubuntu! Please format your post in a proper way - use plain text instead of images!
    – abu_bua
    Nov 22 at 23:12
















Research here: security.stackexchange.com/search?q=chkrootkit
– jdv
Nov 22 at 16:33




Research here: security.stackexchange.com/search?q=chkrootkit
– jdv
Nov 22 at 16:33












Why do you think you are effected? The output only says OSX_RSPLUG not tested. No warning! Take a look at the /var/log/rkhunter.logfile. --> eg sudo less /var/log/rkhunter.log
– abu_bua
Nov 22 at 23:11




Why do you think you are effected? The output only says OSX_RSPLUG not tested. No warning! Take a look at the /var/log/rkhunter.logfile. --> eg sudo less /var/log/rkhunter.log
– abu_bua
Nov 22 at 23:11












Welcome to Ask Ubuntu! Please format your post in a proper way - use plain text instead of images!
– abu_bua
Nov 22 at 23:12




Welcome to Ask Ubuntu! Please format your post in a proper way - use plain text instead of images!
– abu_bua
Nov 22 at 23:12















active

oldest

votes











Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "89"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});






LinuxNut is a new contributor. Be nice, and check out our Code of Conduct.










 

draft saved


draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1095144%2fosx-rsplug-ubuntu-18-04tls-rootkit-found-on-chkrootkit%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown






























active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes








LinuxNut is a new contributor. Be nice, and check out our Code of Conduct.










 

draft saved


draft discarded


















LinuxNut is a new contributor. Be nice, and check out our Code of Conduct.













LinuxNut is a new contributor. Be nice, and check out our Code of Conduct.












LinuxNut is a new contributor. Be nice, and check out our Code of Conduct.















 


draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1095144%2fosx-rsplug-ubuntu-18-04tls-rootkit-found-on-chkrootkit%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

flock() on closed filehandle LOCK_FILE at /usr/bin/apt-mirror

Mangá

Eduardo VII do Reino Unido