Passwd Infected Chkrootkit

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,226
463
I also get from chkrootkit a message that /passwd is infected.
It's likely a false positive. Have you reviewed the post referenced in my previous response to verify if that's the case?

Thank you.
 

Spork Schivago

Well-Known Member
Jan 21, 2016
597
64
28
corning, ny
cPanel Access Level
Root Administrator
For anyone interested, I made a patch with instructions on how to use the patch for chkrootkit-0.50 to make it a bit more cPanel friendly. I've been using it for a few months now with no issues. If anyone wants to try it, it's located: Custom Chkrootkit

Feel free to comment in that thread about it and if you have any suggestions, please leave them. Thank you!
 
  • Like
Reactions: cPanelMichael