beat down - need help w/ prelinking errors after reinstall from hack

Bazooka Joe fastfish at gmail.com
Sun Feb 18 06:44:17 UTC 2007


Got rootkited on friday. spent today building a new box and moving
data.  now my new box is giving errors. I had been running rkhunter
periodically as I reinstalled and then one time it came up w/ this
prelink error so I ran rpm -qVa and you can see below.   btw I am
using fc4

please don't tell me I have to start over.

thx
chris

[root at localhost]# rpm -qVa
prelink: /sbin/ethtool: at least one of file's dependencies has
changed since prelinking
S.?......   /sbin/ethtool
prelink: /sbin/hdparm: at least one of file's dependencies has changed
since prelinking
S.?......   /sbin/hdparm
prelink: /bin/mktemp: at least one of file's dependencies has changed
since prelinking
S.?......   /bin/mktemp
........C   /usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi/auto/Filter/Util/Call/Call.so
........C   /usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi/auto/Filter/Util/Exec/Exec.so
........C   /usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi/auto/Filter/decrypt/decrypt.so
........C   /usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi/auto/Filter/tee/tee.so
prelink: /usr/bin/tclsh8.4: at least one of file's dependencies has
changed since prelinking
S.?......   /usr/bin/tclsh8.4
prelink: /usr/lib/libtcl8.4.so: at least one of file's dependencies
has changed since prelinking
S.?.....C   /usr/lib/libtcl8.4.so
prelink: /bin/ed: at least one of file's dependencies has changed
since prelinking
S.?......   /bin/ed
prelink: /sbin/MAKEDEV: at least one of file's dependencies has
changed since prelinking
S.?......   /sbin/MAKEDEV
prelink: /usr/sbin/mksock: at least one of file's dependencies has
changed since prelinking
S.?......   /usr/sbin/mksock
........C   /usr/lib/python2.4/site-packages/ixf86configmodule.so
prelink: /bin/doexec: at least one of file's dependencies has changed
since prelinking
S.?......   /bin/doexec
prelink: /bin/ipcalc: at least one of file's dependencies has changed
since prelinking
S.?......   /bin/ipcalc
prelink: /bin/usleep: at least one of file's dependencies has changed
since prelinking
S.?......   /bin/usleep
.......T. c /etc/inittab
prelink: /sbin/consoletype: at least one of file's dependencies has
changed since prelinking
S.?......   /sbin/consoletype
prelink: /sbin/genhostid: at least one of file's dependencies has
changed since prelinking
S.?......   /sbin/genhostid
prelink: /sbin/getkey: at least one of file's dependencies has changed
since prelinking
S.?......   /sbin/getkey
prelink: /sbin/initlog: at least one of file's dependencies has
changed since prelinking
S.?......   /sbin/initlog
prelink: /sbin/kmodule: at least one of file's dependencies has
changed since prelinking
S.?......   /sbin/kmodule
prelink: /sbin/netreport: at least one of file's dependencies has
changed since prelinking
S.?......   /sbin/netreport
prelink: /sbin/ppp-watch: at least one of file's dependencies has
changed since prelinking
S.?......   /sbin/ppp-watch
prelink: /sbin/grubby: at least one of file's dependencies has changed
since prelinking
S.?......   /sbin/grubby
prelink: /sbin/dosfsck: at least one of file's dependencies has
changed since prelinking
S.?......   /sbin/dosfsck
prelink: /sbin/fsck.msdos: at least one of file's dependencies has
changed since prelinking
S.?......   /sbin/fsck.msdos
prelink: /sbin/fsck.vfat: at least one of file's dependencies has
changed since prelinking




More information about the fedora-list mailing list