Quantcast
Channel: Single file changed: intrusion or corruption? - Server Fault
Browsing all 3 articles
Browse latest View live

Answer by RichVel for Single file changed: intrusion or corruption?

I agree this isn't an intrusion, but a hardware error of some sort. I would also consider whether you have a failing RAM stick, and run a memtest86 on the host server - single-bit errors could also be...

View Article



Answer by Michael Hampton for Single file changed: intrusion or corruption?

I spot checked a few of those, and they all appear to be single-bit errors. At this point I'd consider replacing the hard drive, using RAID/ZFS, etc.

View Article

Single file changed: intrusion or corruption?

rkhunter reported a single file change on a virtual server (netstat binary). It didn't report any other warning. The change was not the result of a package upgrade (I reinstalled it and the checksum...

View Article
Browsing all 3 articles
Browse latest View live




Latest Images