I've never really tried to understand rootkit enough, I'm too much paranoid...
I recently reinstalled mountain lion, but my EFI might be infected.
I have a macbook pro, it was really slow at some point that week, I could not manage to make an Apple Hardware test, it was weird since I have mountain lion.
Are there known false positives for rkhunter ?
Oddly downloading chkrootkit brings a "Unable to connect" error in firefox, I'm a little worried.
Here are some selected lines from the rkhunter log
Performing file properties checks Checking for prerequisites [ Warning ] /usr/bin/fuser [ Warning ] /usr/bin/whatis [ Warning ] /usr/bin/shasum [ Warning ] Performing check of known rootkit files and directories Dica-Kit Rootkit [ Warning ] Performing additional rootkit checks Checking for possible rootkit strings [ Warning ] Performing system boot checks Checking for system startup files [ Warning ] Performing system configuration file checks Checking if SSH root access is allowed [ Warning ] Checking if SSH protocol v1 is allowed [ Warning ] Performing filesystem checks Checking for hidden files and directories [ Warning ]
Here is the full log http://pastebin.com/x0A2XVFi
PS: I would kind if an OS X user could run rkhunter on his machine to check if there also are false positives...