1 |
Hi All, |
2 |
|
3 |
I am getting a bit confused from the messages that I receive in my gmail |
4 |
account sent from my crontab. |
5 |
|
6 |
First, is related to the title which is: |
7 |
|
8 |
Cron <root@mylaptop> test -x /usr/sbin/run-crons && /usr/sbin/run-crons |
9 |
|
10 |
I am not sure what this "test -x" part represents? |
11 |
|
12 |
|
13 |
The second question is related to the output of chkrootkit, which is run by |
14 |
the cron.weekly and emails stuff that don't make much sense to me: |
15 |
========================================== |
16 |
$Ld$ Ll$(Lt$0HÄ8ÃAWAVAUIýATUSHH°èHAÇHÝHL$ØMäITMt$(HÒtdfDIt$ |
17 |
Hötm½(Ht8fLïèHþÿÿITHÃHÆLïèHßèHîHÅ(It$ |
18 |
HuÊIMôIÆ(HÒu¢DÿèH1À[]A\A]A^A_ÃLæLïèþÿÿëÊLïH5H421ÒèoþÿÿDÿèëÃDS1öH°H;èHß[éCopyright |
19 |
(C) the VideoLAN VLC media player developersLicensed under the terms of the |
20 |
GNU General Public License, version 2 or later.Freebox TV listing (French ISP |
21 |
free.fr services)http/shout- |
22 |
winamp://www.shoutcast.com/sbin/newxml.phtmlhttp/shout- |
23 |
winamp://www.shoutcast.com/sbin/newtvlister.phtml?alltv=1http://mafreebox.freebox.fr/freeboxtv/playlist.m3uhttp://www.canalplus.fr/index.php?pid=1784shoutshoutcast- |
24 |
limitShoutcastShoutcast radio |
25 |
listingsservices_discoveryshoutcastShoutcastTVShoutcast TV |
26 |
listingsshoutcasttvfrenchtvFrench TVFreeboxfreeboxStarting FreeboxStarting |
27 |
FrenchTVStarting ShoutTVStarting ShoutRadiono-playlist- |
28 |
autostartItemAddedShoutcast RadioShoutcast TVFreebox TVvlc://nopCanal +Les |
29 |
Guignolshttp-forward-cookieszRL«ACF0lsJG ,A¤,A¼,AÔ)AìOG0$OL@4DûBBB E(A0A8D@| |
30 |
GCC: (Gentoo 4.3.4 p1.0, pie-10.1.5) |
31 |
4.3.4.symtab.strtab.shstrtab.rela.text.data.bss.rodata.str1.8.rodata.str1.1.rela.data.rel.ro.local.rela.eh_frame.comment.note.GNU- |
32 |
stack @&12@2s |
33 |
========================================== |
34 |
|
35 |
Now I happened to notice that the above legible references to vlc are from the |
36 |
"services discovery" list that the vlc player shows under Media/Services. Not |
37 |
sure what they are doing in chckrootkit ... is it telling me that it just |
38 |
scanned all such content? When I run it manually it looks just the same and |
39 |
follows a long output following "Searching for suspect PHP files..." I am not |
40 |
sure I understand why chkrootkit is emailing these to me and if I need to do |
41 |
something about it. |
42 |
-- |
43 |
Regards, |
44 |
Mick |