Got rootkited on friday. spent today building a new box and moving data. now my new box is giving errors. I had been running rkhunter periodically as I reinstalled and then one time it came up w/ this prelink error so I ran rpm -qVa and you can see below. btw I am using fc4 please don't tell me I have to start over. thx chris [root@localhost]# rpm -qVa prelink: /sbin/ethtool: at least one of file's dependencies has changed since prelinking S.?...... /sbin/ethtool prelink: /sbin/hdparm: at least one of file's dependencies has changed since prelinking S.?...... /sbin/hdparm prelink: /bin/mktemp: at least one of file's dependencies has changed since prelinking S.?...... /bin/mktemp ........C /usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi/auto/Filter/Util/Call/Call.so ........C /usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi/auto/Filter/Util/Exec/Exec.so ........C /usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi/auto/Filter/decrypt/decrypt.so ........C /usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi/auto/Filter/tee/tee.so prelink: /usr/bin/tclsh8.4: at least one of file's dependencies has changed since prelinking S.?...... /usr/bin/tclsh8.4 prelink: /usr/lib/libtcl8.4.so: at least one of file's dependencies has changed since prelinking S.?.....C /usr/lib/libtcl8.4.so prelink: /bin/ed: at least one of file's dependencies has changed since prelinking S.?...... /bin/ed prelink: /sbin/MAKEDEV: at least one of file's dependencies has changed since prelinking S.?...... /sbin/MAKEDEV prelink: /usr/sbin/mksock: at least one of file's dependencies has changed since prelinking S.?...... /usr/sbin/mksock ........C /usr/lib/python2.4/site-packages/ixf86configmodule.so prelink: /bin/doexec: at least one of file's dependencies has changed since prelinking S.?...... /bin/doexec prelink: /bin/ipcalc: at least one of file's dependencies has changed since prelinking S.?...... /bin/ipcalc prelink: /bin/usleep: at least one of file's dependencies has changed since prelinking S.?...... /bin/usleep .......T. c /etc/inittab prelink: /sbin/consoletype: at least one of file's dependencies has changed since prelinking S.?...... /sbin/consoletype prelink: /sbin/genhostid: at least one of file's dependencies has changed since prelinking S.?...... /sbin/genhostid prelink: /sbin/getkey: at least one of file's dependencies has changed since prelinking S.?...... /sbin/getkey prelink: /sbin/initlog: at least one of file's dependencies has changed since prelinking S.?...... /sbin/initlog prelink: /sbin/kmodule: at least one of file's dependencies has changed since prelinking S.?...... /sbin/kmodule prelink: /sbin/netreport: at least one of file's dependencies has changed since prelinking S.?...... /sbin/netreport prelink: /sbin/ppp-watch: at least one of file's dependencies has changed since prelinking S.?...... /sbin/ppp-watch prelink: /sbin/grubby: at least one of file's dependencies has changed since prelinking S.?...... /sbin/grubby prelink: /sbin/dosfsck: at least one of file's dependencies has changed since prelinking S.?...... /sbin/dosfsck prelink: /sbin/fsck.msdos: at least one of file's dependencies has changed since prelinking S.?...... /sbin/fsck.msdos prelink: /sbin/fsck.vfat: at least one of file's dependencies has changed since prelinking
