• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Issue Rootkit Hunter reports Suspect files: 1 on fresh installation

TurnKeyWebsites

New Pleskian
Rootkit Hunter reports Suspect files: 1 on a fresh installation

Here is the summary from Rootkit:
[01:02:03] System checks summary
[01:02:03] =====================
[01:02:03]
[01:02:03] File properties checks...
[01:02:03] Files checked: 145
[01:02:03] Suspect files: 1
[01:02:03]
[01:02:03] Rootkit checks...
[01:02:03] Rootkits checked : 477
[01:02:03] Possible rootkits: 0

I suspect it might be related to this entry:
[01:01:06] /opt/psa/etc/modules/watchdog/rkhunter.conf [ Warning ]
[01:01:06] Warning: Package manager verification has failed:
[01:01:06] File: /opt/psa/etc/modules/watchdog/rkhunter.conf
[01:01:07] The file hash value has changed

Ideally, I would like to set it up so a fresh install has no errors. If the problem is a changed hash value on rkhunter.conf is there a way to correct the issue after modifying this file?

Thanks.
 
rkhunter --propupd will update your system file properties.

Hello,
I ran the command:
# /opt/psa/admin/bin/modules/watchdog/rkhunter --propupd
[ Rootkit Hunter version 1.4.4 ]
File updated: searched for 180 files, found 145

However, after rerunning rkhunter, I had the same result.
 
Back
Top