How to know if there was any change in my system yesterday?

[Brian McKee]

On Sat, Aug 23, 2008 at 8:27 PM, Ashley Benton <chuaukantli at gmail.com> wrote:
>
> It was a private computer and I installed rkhunter only after that had
> happened. It found two suspicious files in /dev
> (/dev/shm/pulse-shm-3256157084: data and /dev/shm/pulse-shm-31......) It
> also found 4 hidden files (/etc/.java  ; /dev/.static  ; /dev/.udev  ;
> /dev/.initramfs)
> I don't know what are the suspicious files yet.

Look at those files and verify for yourself, but I'm pretty sure you
will find they are fine - they exist on Ubuntu installs normally, and
the rkhunter.conf file will have some commented out options that will
whitelist those files for you once you've confirmed they are ok.

Brian