Hi, please, can someone post me the md5 hashes from the following binarys on debian amd64: /usr/sbin/groupadd /usr/sbin/groupdel /usr/sbin/groupmod /usr/sbin/grpck /usr/sbin/nologin /usr/sbin/pwck /usr/sbin/useradd /usr/sbin/userdel /usr/sbin/usermod /usr/sbin/vipw /usr/bin/newgrp /usr/bin/passwd /usr/bin/lastlog /usr/bin/ldd /usr/bin/dpkg /usr/bin/dpkg-query /bin/su /bin/login /usr/bin/sudo
I dont have a 64Boit debian at hand, but if you are not sure if the binaries are ok, try this: apt-get install apt-file then run: apt-file search /usr/sbin/groupadd to find the package which contains a specific file. Then you can reinstall it to ensure that you have the correct binary with: apt-get install --reinstall packagename where packagename has to be replaced with the name of the package. Also you can use rkhunter to check your system.
