Re: gmonstart / jvregisterclasses in tons of binaries with commands,malware?

Ryan Voots <[email protected]> Wed, 16 Dec 2009 23:49:29 -0500
Newsgroups gmane.linux.gentoo.security
Organization mine
Message-ID <[email protected]>
[email protected] said:
> In linux binaries, in any linux distro, I've discovered the same strings
> which I believe may be due to a virus or trojan.
> 
> Yet, clamav, rkhunter, chkrootkit do not detect abnormalities.
> 
> Whether I run 'strings' on the binary files or view with vim or gedit, here
> is what is always seen inside the binaries:
> 
> 
> __gmon_start__
> _Jv_RegisterClasses

http://gcc.gnu.org/ml/gcc/2002-06/msg00112.html

This at least appears to answer the _Jv_RegisterClasses issue, (i haven't found anything about gmon_start).  Essentially what appears to be going on is gcc is doing it, its intended, and i would guess more than likely related to gcj in some way.