Δημοσιεύτηκε: 20 Δεκ 2008, 01:08
από taratatzoum
Κώδικας: Επιλογή όλων
[23:45:46] RSHA's Rootkit [ Not found ]
[23:45:46]
[23:45:46] Checking for Scalper Worm...
[23:45:46] Checking for file '/tmp/.a' [ Not found ]
[23:45:46] Checking for file '/tmp/.uua' [ Not found ]
[23:45:46] Scalper Worm [ Not found ]
[23:45:46]
[23:45:46] Checking for Sebek LKM...
[23:45:47] Checking for kernel symbol 'adore or sebek' [ Not found ]
[23:45:47] Sebek LKM [ Not found ]
[23:45:47]
[23:45:47] Checking for Shutdown Rootkit...
[23:45:47] Checking for file '/usr/man/man5/.. /.dir/scannah/asus' [ Not found ]
[23:45:47] Checking for file '/usr/man/man5/.. /.dir/see' [ Not found ]
[23:45:47] Checking for file '/usr/man/man5/.. /.dir/nscd' [ Not found ]
[23:45:47] Checking for file '/usr/man/man5/.. /.dir/alpd' [ Not found ]
[23:45:47] Checking for file '/etc/rc.d/rc.local ' [ Not found ]
[23:45:47] Checking for directory '/usr/man/man5/.. /.dir' [ Not found ]
[23:45:47] Checking for directory '/usr/man/man5/.. /.dir/scannah' [ Not found ]
[23:45:47] Checking for directory '/etc/rc.d/rc0.d/.. /.dir' [ Not found ]
[23:45:47] Shutdown Rootkit [ Not found ]
[23:45:47]
[23:45:47] Checking for SHV4 Rootkit...
[23:45:47] Checking for file '/etc/ld.so.hash' [ Not found ]
[23:45:47] Checking for file '/lib/libext-2.so.7' [ Not found ]
[23:45:48] Checking for file '/lib/lidps1.so' [ Not found ]
[23:45:48] Checking for file '/usr/sbin/xntps' [ Not found ]
[23:45:48] Checking for directory '/lib/security/.config' [ Not found ]
[23:45:48] Checking for directory '/lib/security/.config/ssh' [ Not found ]
[23:45:48] SHV4 Rootkit [ Not found ]
[23:45:48]
[23:45:48] Checking for SHV5 Rootkit...
[23:45:48] Checking for file '/etc/sh.conf' [ Not found ]
[23:45:48] Checking for file '/dev/srd0' [ Not found ]
[23:45:48] Checking for directory '/usr/lib/libsh' [ Not found ]
[23:45:48] SHV5 Rootkit [ Not found ]
[23:45:48]
[23:45:48] Checking for Sin Rootkit...
[23:45:48] Checking for file '/dev/.haos/haos1/.f/Denyed' [ Not found ]
[23:45:48] Checking for file '/dev/ttyoa' [ Not found ]
[23:45:48] Checking for file '/dev/ttyof' [ Not found ]
[23:45:48] Checking for file '/dev/ttyop' [ Not found ]
[23:45:48] Checking for file '/dev/ttyos' [ Not found ]
[23:45:48] Checking for file '/usr/lib/.lib' [ Not found ]
[23:45:49] Checking for file '/usr/lib/sn/.X' [ Not found ]
[23:45:49] Checking for file '/usr/lib/sn/.sys' [ Not found ]
[23:45:49] Checking for file '/usr/lib/ld/.X' [ Not found ]
[23:45:49] Checking for file '/usr/man/man1/...' [ Not found ]
[23:45:49] Checking for file '/usr/man/man1/.../.m' [ Not found ]
[23:45:49] Checking for file '/usr/man/man1/.../.w' [ Not found ]
[23:45:49] Checking for directory '/usr/lib/sn' [ Not found ]
[23:45:49] Checking for directory '/usr/lib/man1/...' [ Not found ]
[23:45:49] Checking for directory '/dev/.haos' [ Not found ]
[23:45:49] Sin Rootkit [ Not found ]
[23:45:49]
[23:45:49] Checking for Slapper Worm...
[23:45:49] Checking for file '/tmp/.bugtraq' [ Not found ]
[23:45:49] Checking for file '/tmp/.uubugtraq' [ Not found ]
[23:45:49] Checking for file '/tmp/.bugtraq.c' [ Not found ]
[23:45:50] Checking for file '/tmp/httpd' [ Not found ]
[23:45:50] Checking for file '/tmp/.unlock' [ Not found ]
[23:45:50] Checking for file '/tmp/update' [ Not found ]
[23:45:50] Checking for file '/tmp/.cinik' [ Not found ]
[23:45:50] Checking for file '/tmp/.b' [ Not found ]
[23:45:50] Slapper Worm [ Not found ]
[23:45:50]
[23:45:50] Checking for Sneakin Rootkit...
[23:45:50] Checking for directory '/tmp/.X11-unix/.../rk' [ Not found ]
[23:45:50] Sneakin Rootkit [ Not found ]
[23:45:50]
[23:45:50] Checking for Suckit Rootkit...
[23:45:50] Checking for file '/sbin/initsk12' [ Not found ]
[23:45:50] Checking for file '/sbin/initxrk' [ Not found ]
[23:45:50] Checking for file '/usr/bin/null' [ Not found ]
[23:45:50] Checking for file '/usr/share/locale/sk/.sk12/sk' [ Not found ]
[23:45:50] Checking for file '/etc/rc.d/rc0.d/S23kmdac' [ Not found ]
[23:45:50] Checking for file '/etc/rc.d/rc1.d/S23kmdac' [ Not found ]
[23:45:50] Checking for file '/etc/rc.d/rc2.d/S23kmdac' [ Not found ]
[23:45:50] Checking for file '/etc/rc.d/rc3.d/S23kmdac' [ Not found ]
[23:45:51] Checking for file '/etc/rc.d/rc4.d/S23kmdac' [ Not found ]
[23:45:51] Checking for file '/etc/rc.d/rc5.d/S23kmdac' [ Not found ]
[23:45:51] Checking for file '/etc/rc.d/rc6.d/S23kmdac' [ Not found ]
[23:45:51] Checking for directory '/dev/sdhu0/tehdrakg' [ Not found ]
[23:45:51] Checking for directory '/etc/.MG' [ Not found ]
[23:45:51] Checking for directory '/usr/share/locale/sk/.sk12' [ Not found ]
[23:45:51] Checking for directory '/usr/lib/perl5/site_perl/i386-linux/auto/TimeDate/.packlist' [ Not found ]
[23:45:51] Suckit Rootkit [ Not found ]
[23:45:51]
[23:45:51] Checking for SunOS Rootkit...
[23:45:51] Checking for file '/etc/ld.so.hash' [ Not found ]
[23:45:51] Checking for file '/lib/libext-2.so.7' [ Not found ]
[23:45:51] Checking for file '/usr/bin/ssh2d' [ Not found ]
[23:45:51] Checking for file '/bin/xlogin' [ Not found ]
[23:45:51] Checking for file '/usr/lib/crth.o' [ Not found ]
[23:45:51] Checking for file '/usr/lib/crtz.o' [ Not found ]
[23:45:51] Checking for file '/sbin/login' [ Not found ]
[23:45:51] Checking for file '/lib/security/.config/sn' [ Not found ]
[23:45:51] Checking for file '/lib/security/.config/lpsched' [ Not found ]
[23:45:52] Checking for file '/dev/kmod' [ Not found ]
[23:45:52] Checking for file '/dev/dos' [ Not found ]
[23:45:52] SunOS Rootkit [ Not found ]
[23:45:52]
[23:45:52] Checking for SunOS / NSDAP Rootkit...
[23:45:52] Checking for file '/usr/lib/vold/nsdap/.kit' [ Not found ]
[23:45:52] Checking for file '/usr/lib/vold/nsdap/defines' [ Not found ]
[23:45:52] Checking for file '/usr/lib/vold/nsdap/patcher' [ Not found ]
[23:45:52] Checking for file '/usr/lib/vold/nsdap/pg' [ Not found ]
[23:45:52] Checking for file '/usr/lib/vold/nsdap/cleaner' [ Not found ]
[23:45:52] Checking for file '/usr/lib/vold/nsdap/utime' [ Not found ]
[23:45:52] Checking for file '/usr/lib/vold/nsdap/crypt' [ Not found ]
[23:45:52] Checking for file '/usr/lib/vold/nsdap/findkit' [ Not found ]
[23:45:52] Checking for file '/usr/lib/vold/nsdap/sn2' [ Not found ]
[23:45:52] Checking for file '/usr/lib/vold/nsdap/sniffload' [ Not found ]
[23:45:52] Checking for file '/usr/lib/vold/nsdap/runsniff' [ Not found ]
[23:45:53] Checking for file '/usr/lib/lpset' [ Not found ]
[23:45:53] Checking for directory '/usr/lib/vold/nsdap' [ Not found ]
[23:45:53] SunOS / NSDAP Rootkit [ Not found ]
[23:45:53]
[23:45:53] Checking for Superkit Rootkit...
[23:45:53] Checking for file '/usr/man/.sman/sk' [ Not found ]
[23:45:53] Superkit Rootkit [ Not found ]
[23:45:53]
[23:45:53] Checking for TBD (Telnet BackDoor)...
[23:45:53] Checking for file '/usr/lib/.tbd' [ Not found ]
[23:45:53] TBD (Telnet BackDoor) [ Not found ]
[23:45:53]
[23:45:53] Checking for TeLeKiT Rootkit...
[23:45:53] Checking for file '/usr/man/man3/.../TeLeKiT/bin/sniff' [ Not found ]
[23:45:53] Checking for file '/usr/man/man3/.../TeLeKiT/bin/telnetd' [ Not found ]
[23:45:53] Checking for file '/usr/man/man3/.../TeLeKiT/bin/teleulo' [ Not found ]
[23:45:53] Checking for file '/usr/man/man3/.../cl' [ Not found ]
[23:45:53] Checking for file '/dev/ptyr' [ Not found ]
[23:45:53] Checking for file '/dev/ptyp' [ Not found ]
[23:45:53] Checking for file '/dev/ptyq' [ Not found ]
[23:45:53] Checking for file '/dev/hda06' [ Not found ]
[23:45:54] Checking for file '/usr/info/libc1.so' [ Not found ]
[23:45:54] Checking for directory '/usr/man/man3/...' [ Not found ]
[23:45:54] Checking for directory '/usr/man/man3/.../lsniff' [ Not found ]
[23:45:54] Checking for directory '/usr/man/man3/.../TeLeKiT' [ Not found ]
[23:45:54] TeLeKiT Rootkit [ Not found ]
[23:45:54]
[23:45:54] Checking for T0rn Rootkit...
[23:45:54] Checking for file '/dev/.lib/lib/lib/t0rns' [ Not found ]
[23:45:54] Checking for file '/dev/.lib/lib/lib/du' [ Not found ]
[23:45:54] Checking for file '/dev/.lib/lib/lib/ls' [ Not found ]
[23:45:54] Checking for file '/dev/.lib/lib/lib/t0rnsb' [ Not found ]
[23:45:54] Checking for file '/dev/.lib/lib/lib/ps' [ Not found ]
[23:45:54] Checking for file '/dev/.lib/lib/lib/t0rnp' [ Not found ]
[23:45:54] Checking for file '/dev/.lib/lib/lib/find' [ Not found ]
[23:45:54] Checking for file '/dev/.lib/lib/lib/ifconfig' [ Not found ]
[23:45:54] Checking for file '/dev/.lib/lib/lib/pg' [ Not found ]
[23:45:55] Checking for file '/dev/.lib/lib/lib/ssh.tgz' [ Not found ]
[23:45:55] Checking for file '/dev/.lib/lib/lib/top' [ Not found ]
[23:45:55] Checking for file '/dev/.lib/lib/lib/sz' [ Not found ]
[23:45:55] Checking for file '/dev/.lib/lib/lib/login' [ Not found ]
[23:45:55] Checking for file '/dev/.lib/lib/lib/in.fingerd' [ Not found ]
[23:45:55] Checking for file '/dev/.lib/lib/lib/1i0n.sh' [ Not found ]
[23:45:55] Checking for file '/dev/.lib/lib/lib/pstree' [ Not found ]
[23:45:55] Checking for file '/dev/.lib/lib/lib/in.telnetd' [ Not found ]
[23:45:55] Checking for file '/dev/.lib/lib/lib/mjy' [ Not found ]
[23:45:55] Checking for file '/dev/.lib/lib/lib/sush' [ Not found ]
[23:45:55] Checking for file '/dev/.lib/lib/lib/tfn' [ Not found ]
[23:45:55] Checking for file '/dev/.lib/lib/lib/name' [ Not found ]
[23:45:55] Checking for file '/dev/.lib/lib/lib/getip.sh' [ Not found ]
[23:45:55] Checking for file '/usr/info/.torn/sh*' [ Not found ]
[23:45:55] Checking for file '/usr/src/.puta/.1addr' [ Not found ]
[23:45:55] Checking for file '/usr/src/.puta/.1file' [ Not found ]
[23:45:56] Checking for file '/usr/src/.puta/.1proc' [ Not found ]
[23:45:56] Checking for file '/usr/src/.puta/.1logz' [ Not found ]
[23:45:56] Checking for file '/usr/info/.t0rn' [ Not found ]
[23:45:56] Checking for directory '/dev/.lib' [ Not found ]
[23:45:56] Checking for directory '/dev/.lib/lib' [ Not found ]
[23:45:56] Checking for directory '/dev/.lib/lib/lib' [ Not found ]
[23:45:56] Checking for directory '/dev/.lib/lib/lib/dev' [ Not found ]
[23:45:56] Checking for directory '/dev/.lib/lib/scan' [ Not found ]
[23:45:56] Checking for directory '/usr/src/.puta' [ Not found ]
[23:45:56] Checking for directory '/usr/man/man1/man1' [ Not found ]
[23:45:56] Checking for directory '/usr/man/man1/man1/lib' [ Not found ]
[23:45:56] Checking for directory '/usr/man/man1/man1/lib/.lib' [ Not found ]
[23:45:56] Checking for directory '/usr/man/man1/man1/lib/.lib/.backup' [ Not found ]
[23:45:56] T0rn Rootkit [ Not found ]
[23:45:56]
[23:45:56] Checking for Trojanit Kit...
[23:45:56] Checking for file '/bin/.ls' [ Not found ]
[23:45:57] Checking for file '/bin/.ps' [ Not found ]
[23:45:57] Checking for file '/bin/.netstat' [ Not found ]
[23:45:57] Checking for file '/usr/bin/.nop' [ Not found ]
[23:45:57] Checking for file '/usr/bin/.who' [ Not found ]
[23:45:57] Trojanit Kit [ Not found ]
[23:45:57]
[23:45:57] Checking for Tuxtendo Rootkit...
[23:45:57] Checking for file '/dev/tux/.addr' [ Not found ]
[23:45:57] Checking for file '/dev/tux/.cron' [ Not found ]
[23:45:57] Checking for file '/dev/tux/.file' [ Not found ]
[23:45:57] Checking for file '/dev/tux/.log' [ Not found ]
[23:45:57] Checking for file '/dev/tux/.proc' [ Not found ]
[23:45:57] Checking for file '/dev/tux/backup/crontab' [ Not found ]
[23:45:57] Checking for file '/dev/tux/backup/df' [ Not found ]
[23:45:57] Checking for file '/dev/tux/backup/dir' [ Not found ]
[23:45:57] Checking for file '/dev/tux/backup/find' [ Not found ]
[23:45:57] Checking for file '/dev/tux/backup/ifconfig' [ Not found ]
[23:45:58] Checking for file '/dev/tux/backup/locate' [ Not found ]
[23:45:58] Checking for file '/dev/tux/backup/netstat' [ Not found ]
[23:45:58] Checking for file '/dev/tux/backup/ps' [ Not found ]
[23:45:58] Checking for file '/dev/tux/backup/pstree' [ Not found ]
[23:45:58] Checking for file '/dev/tux/backup/syslogd' [ Not found ]
[23:45:58] Checking for file '/dev/tux/backup/tcpd' [ Not found ]
[23:45:58] Checking for file '/dev/tux/backup/top' [ Not found ]
[23:45:58] Checking for file '/dev/tux/backup/updatedb' [ Not found ]
[23:45:58] Checking for file '/dev/tux/backup/vdir' [ Not found ]
[23:45:58] Checking for directory '/dev/tux' [ Not found ]
[23:45:58] Checking for directory '/dev/tux/ssh2' [ Not found ]
[23:45:58] Checking for directory '/dev/tux/backup' [ Not found ]
[23:45:58] Tuxtendo Rootkit [ Not found ]
[23:45:58]
[23:45:58] Checking for URK Rootkit...
[23:45:58] Checking for file '/usr/man/man1/xxxxxxbin/find' [ Not found ]
[23:45:58] Checking for file '/usr/man/man1/xxxxxxbin/du' [ Not found ]
[23:45:58] Checking for file '/usr/man/man1/xxxxxxbin/ps' [ Not found ]
[23:45:58] Checking for file '/tmp/conf.inf' [ Not found ]
[23:45:58] Checking for directory '/usr/man/man1/xxxxxxbin' [ Not found ]
[23:45:59] URK Rootkit [ Not found ]
[23:45:59]
[23:45:59] Checking for VcKit Rootkit...
[23:45:59] Checking for directory '/usr/include/linux/modules/lib.so' [ Not found ]
[23:45:59] Checking for directory '/usr/include/linux/modules/lib.so/bin' [ Not found ]
[23:45:59] VcKit Rootkit [ Not found ]
[23:45:59]
[23:45:59] Checking for Volc Rootkit...
[23:45:59] Checking for directory '/var/spool/.recent' [ Not found ]
[23:45:59] Checking for directory '/var/spool/.recent/.files' [ Not found ]
[23:45:59] Checking for directory '/usr/lib/volc' [ Not found ]
[23:45:59] Checking for directory '/usr/lib/volc/backup' [ Not found ]
[23:45:59] Volc Rootkit [ Not found ]
[23:45:59]
[23:45:59] Checking for X-Org SunOS Rootkit...
[23:45:59] Checking for file '/usr/lib/libX.a/bin/tmpfl' [ Not found ]
[23:45:59] Checking for file '/usr/lib/libX.a/bin/rps' [ Not found ]
[23:45:59] Checking for file '/usr/bin/srload' [ Not found ]
[23:45:59] Checking for file '/usr/lib/libX.a/bin/sparcv7/rps' [ Not found ]
[23:45:59] Checking for file '/usr/sbin/modcheck' [ Not found ]
[23:46:00] Checking for directory '/usr/lib/libX.a' [ Not found ]
[23:46:00] Checking for directory '/usr/lib/libX.a/bin' [ Not found ]
[23:46:00] Checking for directory '/usr/lib/libX.a/bin/sparcv7' [ Not found ]
[23:46:00] Checking for directory '/usr/share/man...' [ Not found ]
[23:46:00] X-Org SunOS Rootkit [ Not found ]
[23:46:00]
[23:46:00] Checking for zaRwT.KiT Rootkit...
[23:46:00] Checking for file '/dev/rd/s/sendmeil' [ Not found ]
[23:46:00] Checking for file '/dev/ttyf' [ Not found ]
[23:46:00] Checking for file '/dev/ttyp' [ Not found ]
[23:46:00] Checking for file '/dev/ttyn' [ Not found ]
[23:46:00] Checking for file '/rk/tulz' [ Not found ]
[23:46:00] Checking for directory '/rk' [ Not found ]
[23:46:00] Checking for directory '/dev/rd/s' [ Not found ]
[23:46:00] zaRwT.KiT Rootkit [ Not found ]
[23:46:00]
[23:46:00] Performing additional rootkit checks
[23:46:00] Info: Starting test name 'additional_rkts'
[23:46:00]
[23:46:00] Performing Suckit Rookit additional checks
[23:46:00] Checking /sbin/init link count [ OK ]
[23:46:01] Checking for hidden file extensions [ None found ]
[23:46:01] Running skdet command [ Skipped ]
[23:46:01] Info: Unable to find the 'skdet' command
[23:46:01] Suckit Rookit additional checks [ OK ]
[23:46:01]
[23:46:01] Performing check of possible rootkit files and directories
[23:46:01] Info: Starting test name 'possible_rkt_files'
[23:46:01] Checking for file '/dev/sdr0' [ Not found ]
[23:46:01] Checking for file '/tmp/.syshackfile' [ Not found ]
[23:46:01] Checking for file '/tmp/.bash_history' [ Not found ]
[23:46:01] Checking for file '/usr/info/.clib' [ Not found ]
[23:46:01] Checking for file '/usr/sbin/tcp.log' [ Not found ]
[23:46:01] Checking for file '/usr/bin/take/pid' [ Not found ]
[23:46:01] Checking for file '/sbin/create' [ Not found ]
[23:46:01] Checking for file '/dev/ttypz' [ Not found ]
[23:46:02] Checking for directory '/usr/bin/take' [ Not found ]
[23:46:02] Checking for directory '/usr/src/.lib' [ Not found ]
[23:46:02] Checking for directory '/usr/share/man/man1/.1c' [ Not found ]
[23:46:02] Checking for directory '/lib/lblip.tk' [ Not found ]
[23:46:02] Checking for directory '/usr/sbin/...' [ Not found ]
[23:46:02] Checking for directory '/usr/share/.gun' [ Not found ]
[23:46:02] Checking for possible rootkit files and directories [ None found ]
[23:46:02]
[23:46:02] Performing check for possible rootkit strings
[23:46:02] Info: Starting test name 'possible_rkt_strings'
[23:46:02] Info: Found local startup file: /etc/rc.local
[23:46:02] Checking for string '/dev/proc/fuckit' [ Not found ]
[23:46:02] Checking for string 'f***' [ Not found ]
[23:46:02] Checking for string 'backdoor' [ Not found ]
[23:46:02] Checking for string 'vt200' [ Not found ]
[23:46:03] Checking for string '/usr/bin/xstat' [ Not found ]
[23:46:03] Checking for string '/bin/envpc' [ Not found ]
[23:46:03] Checking for string 'L4m3r0x' [ Not found ]
[23:46:03] Checking for string '/usr/lib/.tbd' [ Not found ]
[23:46:03] Checking for string '/dev/ptyxx/.file' [ Not found ]
[23:46:03] Checking for string '/dev/sgk' [ Not found ]
[23:46:03] Checking for string '/var/lock/subsys/...datafile...' [ Not found ]
[23:46:03] Checking for string '/usr/lib/.tbd' [ Not found ]
[23:46:03] Checking for string '/dev/proc/fuckit' [ Not found ]
[23:46:03] Checking for string '/lib/.sso' [ Not found ]
[23:46:03] Checking for string '/var/lock/subsys/...datafile...' [ Not found ]
[23:46:03] Checking for string '/dev/caca' [ Not found ]
[23:46:03] Checking for string '/dev/ttyoa' [ Not found ]
[23:46:04] Checking for string 'syg' [ Not found ]
[23:46:04] Checking for string '/dev/pts/01' [ Not found ]
[23:46:04] Checking for string 'tw33dl3' [ Not found ]
[23:46:04] Checking for string 'psniff' [ Not found ]
[23:46:04] Checking for string '/var/lock/subsys/...datafile...' [ Not found ]
[23:46:04] Checking for string 'promiscuous' [ Not found ]
[23:46:04] Checking for string '/usr/lib/.tbd' [ Not found ]
[23:46:04] Checking for string '/dev/xdta' [ Not found ]
[23:46:04] Checking for string '/usr/lib/.tbd' [ Not found ]
[23:46:04] Checking for string 'in.inetd' [ Not found ]
[23:46:05] Checking for string '#<HIDE_.*>' [ Not found ]
[23:46:05] Checking for string 'bin/xchk' [ Not found ]
[23:46:05] Checking for string 'bin/xsf' [ Not found ]
[23:46:05] Checking for possible rootkit strings [ None found ]
[23:46:05]
[23:46:05] Performing malware checks
[23:46:05] Info: Starting test name 'malware'
[23:46:05]
[23:46:05] Info: Test 'deleted_files' disabled at users request.
[23:46:05] Info: Starting test name 'running_procs'
[23:46:05] Checking running processes for suspicious files [ None found ]
[23:46:06]
[23:46:06] Info: Test 'hidden_procs' disabled at users request.
[23:46:06]
[23:46:06] Info: Test 'suspscan' disabled at users request.
[23:46:06]
[23:46:06] Performing check for login backdoors
[23:46:06] Info: Starting test name 'other_malware'
[23:46:06] Checking for '/bin/.login' [ Not found ]
[23:46:06] Checking for '/sbin/.login' [ Not found ]
[23:46:06] Checking for login backdoors [ None found ]
[23:46:06]
[23:46:06] Performing check for suspicious directories
[23:46:06] Checking for directory '/usr/X11R6/bin/.,/copy' [ Not found ]
[23:46:06] Checking for directory '/dev/rd/cdb' [ Not found ]
[23:46:06] Checking for suspicious directories [ None found ]
[23:46:06]
[23:46:06] Checking for software intrusions [ Skipped ]
[23:46:06] Info: Check skipped - tripwire not installed
[23:46:06]
[23:46:06] Performing check for sniffer log files
[23:46:06] Checking for file '/usr/lib/libice.log' [ Not found ]
[23:46:06] Checking for sniffer log files [ None found ]
[23:46:06]
[23:46:06] Performing trojan specific checks
[23:46:06] Info: Starting test name 'trojans'
[23:46:06] Info: Using inetd configuration file '/etc/inetd.conf'
[23:46:07] Checking for enabled inetd services [ OK ]
[23:46:07]
[23:46:07] Performing check for enabled xinetd services
[23:46:07] Checking for enabled xinetd services [ Skipped ]
[23:46:07] Info: Check skipped - file '/etc/xinetd.conf' does not exist.
[23:46:07] Info: Apache backdoor check skipped: Apache modules and configuration directories not found.
[23:46:07]
[23:46:07] Performing Linux specific checks
[23:46:07] Info: Starting test name 'os_specific'
[23:46:07] Checking kernel module commands [ OK ]
[23:46:07] Info: Using modules pathname of '/lib/modules/2.6.24-22-rt'
[23:46:07] Checking kernel module names [ OK ]
[23:46:23]
[23:46:23] Checking the network...
[23:46:23] Info: Starting test name 'network'
[23:46:23] Info: Starting test name 'ports'
[23:46:23]
[23:46:23] Performing check for backdoor ports
[23:46:24] Checking for UDP port 2001 [ Not found ]
[23:46:24] Checking for TCP port 2006 [ Not found ]
[23:46:24] Checking for TCP port 2128 [ Not found ]
[23:46:25] Checking for TCP port 14856 [ Not found ]
[23:46:25] Checking for TCP port 47107 [ Not found ]
[23:46:25] Checking for TCP port 60922 [ Not found ]
[23:46:25]
[23:46:25] Performing checks on the network interfaces
[23:46:25] Info: Starting test name 'promisc'
[23:46:26] Checking for promiscuous interfaces [ None found ]
[23:46:26]
[23:46:26] Info: Test 'packet_cap_apps' disabled at users request.
[23:46:32]
[23:46:32] Checking the local host...
[23:46:32] Info: Starting test name 'local_host'
[23:46:32]
[23:46:32] Performing system boot checks
[23:46:32] Info: Starting test name 'startup_files'
[23:46:33] Checking for local host name [ Found ]
[23:46:33] Info: Starting test name 'startup_malware'
[23:46:33] Info: Found local startup file: /etc/rc.local
[23:46:33] Checking for local startup files [ Found ]
[23:46:33] Checking local startup files for malware [ None found ]
[23:46:33] Info: Found system startup directory: /etc/init.d
[23:46:35] Checking system startup files for malware [ None found ]
[23:46:35]
[23:46:35] Performing group and account checks
[23:46:35] Info: Starting test name 'group_accounts'
[23:46:35] Checking for passwd file [ Found ]
[23:46:35] Info: Found password file: /etc/passwd
[23:46:35] Checking for root equivalent (UID 0) accounts [ None found ]
[23:46:35] Info: Found shadow file: /etc/shadow
[23:46:35] Checking for passwordless accounts [ None found ]
[23:46:35] Info: Starting test name 'passwd_changes'
[23:46:35] Checking for passwd file changes [ None found ]
[23:46:35] Info: Starting test name 'group_changes'
[23:46:35] Checking for group file changes [ None found ]
[23:46:35] Checking root account shell history files [ OK ]
[23:46:35]
[23:46:35] Performing system configuration file checks
[23:46:35] Info: Starting test name 'system_configs'
[23:46:35] Checking for SSH configuration file [ Not found ]
[23:46:35] Checking for running syslog daemon [ Found ]
[23:46:36] Checking for syslog configuration file [ Found ]
[23:46:36] Info: Found syslog configuration file: /etc/syslog.conf
[23:46:36] Checking if syslog remote logging is allowed [ Not allowed ]
[23:46:36]
[23:46:36] Performing filesystem checks
[23:46:36] Info: Starting test name 'filesystem'
[23:46:36] Info: SCAN_MODE_DEV set to 'THOROUGH'
[23:47:56] Checking /dev for suspicious file types [ Warning ]
[23:47:56] Warning: Suspicious file types found in /dev:
[23:47:56] /dev/shm/pulse-shm-1155760789: data
[23:47:56] /dev/shm/pulse-shm-4019048598: data
[23:47:57] Checking for hidden files and directories [ Warning ]
[23:47:57] Warning: Hidden directory found: /etc/.java
[23:47:57] Warning: Hidden directory found: /dev/.static
[23:47:57] Warning: Hidden directory found: /dev/.udev
[23:47:57] Warning: Hidden directory found: /dev/.initramfs
[23:47:59]
[23:47:59] Checking application versions...
[23:47:59] Info: Starting test name 'apps'
[23:47:59] Checking version of Exim MTA [ OK ]
[23:47:59] Info: Application 'exim' version '4.69' found.
[23:47:59] Checking version of GnuPG [ OK ]
[23:48:00] Info: Application 'gpg' version '1.4.6' found.
[23:48:00] Info: Application 'httpd' not found.
[23:48:00] Info: Application 'named' not found.
[23:48:00] Checking version of OpenSSL [ OK ]
[23:48:00] Info: Application 'openssl' version '0.9.8g' found.
[23:48:00] Info: Application 'php' not found.
[23:48:00] Info: Application 'procmail' not found.
[23:48:00] Info: Application 'proftpd' not found.
[23:48:00] Info: Application 'sshd' not found.
[23:48:00] Info: Applications checked: 3 out of 9
[23:48:00]
[23:48:00] System checks summary
[23:48:00] =====================
[23:48:00]
[23:48:00] File properties checks...
[23:48:00] Files checked: 123
[23:48:00] Suspect files: 23
[23:48:00]
[23:48:00] Rootkit checks...
[23:48:00] Rootkits checked : 109
[23:48:00] Possible rootkits: 0
[23:48:00]
[23:48:00] Applications checks...
[23:48:00] Applications checked: 3
[23:48:00] Suspect applications: 0
[23:48:00]
[23:48:00] The system checks took: 3 minutes and 27 seconds
[23:48:01]
[23:48:01] Info: End date is Παρ 19 Δεκ 2008 11:48:01 μμ EET