Re: gmonstart / jvregisterclasses in tons of binaries with commands,malware?
Ryan Voots <[email protected]> Wed, 16 Dec 2009 23:49:29 -0500
| Newsgroups | gmane.linux.gentoo.security |
|---|---|
| Organization | mine |
| Message-ID | <[email protected]> |
[email protected] said: > In linux binaries, in any linux distro, I've discovered the same strings > which I believe may be due to a virus or trojan. > > Yet, clamav, rkhunter, chkrootkit do not detect abnormalities. > > Whether I run 'strings' on the binary files or view with vim or gedit, here > is what is always seen inside the binaries: > > > __gmon_start__ > _Jv_RegisterClasses http://gcc.gnu.org/ml/gcc/2002-06/msg00112.html This at least appears to answer the _Jv_RegisterClasses issue, (i haven't found anything about gmon_start). Essentially what appears to be going on is gcc is doing it, its intended, and i would guess more than likely related to gcj in some way.