Ubuntu

Hidden directories/files found by rkhunter

Asked by PJJ

After our website was hacked and the problem fixed, we scanned with Klamax and then with rkhunter for root kits.

Klamax found two kernels with 'corruption' possibly caused by a virus.
/lib/linux-restricted-modules/2.6.24-12-generic/fglrx/libfglrx_ip.a.GCC4
"broken executable".

rkhunter issued a warning about hidden directories and files as follows:

 Checking for hidden files and directories [ Warning ]
[07:57:31] Warning: Hidden directory found: /etc/.java
[07:57:31] Warning: Hidden directory found: /dev/.static
[07:57:31] Warning: Hidden directory found: /dev/.udev
[07:57:31] Warning: Hidden directory found: /dev/.initramfs

I have these files in 2 versions of Kubuntu on two separate hard drives.

Can you tell me please whether the hidden files/directories belong where they are and, if not, how to eliminate the problem. Simply deleting does not work.

Thanks.

Peter

Please advise.

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Solved by:
Gord Allott
Solved:
Last query:
Last reply:
Revision history for this message
Best Gord Allott (gordallott) said : 		#1

these are just 'hidden' directories, they pose no threat to you, they are just used by java and udev and what not to store information, thats why rkhunter only issues a warning

Revision history for this message
PJJ (pj90292) said : 		#2

Thank you for the quick turnaround.