Answer by RichVel for Single file changed: intrusion or corruption?
I agree this isn't an intrusion, but a hardware error of some sort. I would also consider whether you have a failing RAM stick, and run a memtest86 on the host server - single-bit errors could also be...
View ArticleAnswer by Michael Hampton for Single file changed: intrusion or corruption?
I spot checked a few of those, and they all appear to be single-bit errors. At this point I'd consider replacing the hard drive, using RAID/ZFS, etc.
View ArticleSingle file changed: intrusion or corruption?
rkhunter reported a single file change on a virtual server (netstat binary). It didn't report any other warning. The change was not the result of a package upgrade (I reinstalled it and the checksum...
View Article
More Pages to Explore .....