rkhunter question - differences in user accounts?

[jols]

Any idea what this means? Should I remove these four vsite hosted accounts from the server?

-----------------------------------

Checking for differences in user accounts... Found differences
Info:
----------------------
< oki9ramm:x:32291:32291::/home/oki9ramm:/usr/local/cpanel/bin/noshell
< z3terra:x:32292:32292::/home/z3terra:/usr/local/cpanel/bin/noshell
< dcjames:x:32293:32293::/home/dcjames:/usr/local/cpanel/bin/noshell
< robertvm:x:32294:32294::/home/robertvm:/usr/local/cpanel/bin/noshell
----------------------
Info: Some items have been added (items marked with '<')
Checking for differences in user groups... Found differences
Info:
----------------------
< oki9ramm:x:32291:
< z3terra:x:32292:
< dcjames:x:32293:
< robertvm:x:32294:
----------------------

 

[simplestar]

Login via SSH and run a full scan of RkHunter and see what the results are.

----command------
rkhunter -c

 

[jols]

Yup, that's what I did.
I just pulled out and posted the results that were puzzeling to me.

 

[simplestar]

Nothing else was found? that's good. Did you do any admin changes? It does state 'no shell'.
for myself anyway, when I make a change to an account such as password, RKHunter's next run will pull up a difference.