I am running Ubuntu 14.04 32bit.
Recently, I decided to install ClamAV. It keeps warning me about this pua.win.trojan.xored-1. I read online that this means I have a rootkit.
I download and ran chkrootkit. It says the following:
The following suspicious files and directories were found:
/usr/lib/python2.7/dist-packages/PyQt4/uic/widget-plugins/.noinit
Searching for Suckit rootkit... Warning: /sbin/init INFECTED
I just ran rkhunter and this came up:
/usr/bin/unhide.rb [ Warning ]
To remedy the problem, I am currently downloading a new Ubuntu ISO. I will re-install everything from scratch. Assuming that I have a rootkit, is this enough to solve the problem?
Update: I didn't know that rkhunter wasn't finished yet. Here is some more:
Checking /dev for suspicious file types [ Warning ]
Checking for hidden files and directories [ Warning ]
