Ubuntu-gr Forum

/var/log/rkhunter.log

Κώδικας: Επιλογή όλων: [14:51:57] Running Rootkit Hunter version 1.3.0 on dell-rizitis [14:51:57] [14:51:57] Info: Start date is Σαβ 20 Δεκ 2008 02:51:57 μμ EET [14:51:57] [14:51:57] Checking configuration file and command-line options... [14:51:57] Info: Detected operating system is 'Linux' [14:51:58] Info: Found O/S name: Ubuntu 8.04.1 [14:51:58] Info: Command line is /usr/bin/rkhunter --check [14:51:58] Info: Environment shell is /bin/bash; rkhunter is using dash [14:51:58] Info: Using configuration file '/etc/rkhunter.conf' [14:51:58] Info: Installation directory is '/usr' [14:51:58] Info: Using language 'en' [14:51:58] Info: Using '/var/lib/rkhunter/db' as the database directory [14:51:58] Info: Using '/usr/share/rkhunter/scripts' as the support script directory [14:51:58] Info: Using '/usr/local/sbin /usr/local/bin /usr/sbin /usr/bin /sbin /bin /usr/X11R6/bin /bin /usr/bin /sbin /usr/sbin /usr/local/bin /usr/local/sbin /usr/libexec /usr/local/libexec' as the command directories [14:51:58] Info: Using '/' as the root directory [14:51:58] Info: Using '/var/lib/rkhunter/tmp' as the temporary directory [14:51:58] Info: No mail-on-warning address configured [14:51:58] Info: X will automatically be detected [14:51:59] Info: Using second color set [14:51:59] Info: Found the 'diff' command: /usr/bin/diff [14:51:59] Info: Found the 'file' command: /usr/bin/file [14:51:59] Info: Found the 'find' command: /usr/bin/find [14:51:59] Info: Found the 'ifconfig' command: /sbin/ifconfig [14:51:59] Info: Found the 'ip' command: /sbin/ip [14:51:59] Info: Found the 'ldd' command: /usr/bin/ldd [14:51:59] Info: Found the 'lsattr' command: /usr/bin/lsattr [14:51:59] Info: Found the 'lsmod' command: /sbin/lsmod [14:51:59] Info: Found the 'lsof' command: /usr/bin/lsof [14:52:00] Info: Found the 'mktemp' command: /bin/mktemp [14:52:00] Info: Found the 'netstat' command: /bin/netstat [14:52:00] Info: Found the 'perl' command: /usr/bin/perl [14:52:00] Info: Found the 'ps' command: /bin/ps [14:52:00] Info: Found the 'pwd' command: /bin/pwd [14:52:00] Info: Found the 'readlink' command: /bin/readlink [14:52:00] Info: Found the 'sort' command: /usr/bin/sort [14:52:00] Info: Found the 'stat' command: /usr/bin/stat [14:52:00] Info: Found the 'strings' command: /usr/bin/strings [14:52:00] Info: Found the 'uniq' command: /usr/bin/uniq [14:52:00] Info: System is not using prelinking [14:52:01] Info: Using the '/usr/bin/sha1sum' command for the file hash checks [14:52:01] Info: Stored hash values used hash function '/usr/bin/sha1sum' [14:52:01] Info: Stored hash values did not use a package manager [14:52:01] Info: The hash function field index is set to 1 [14:52:01] Info: No package manager specified: using hash function '/usr/bin/sha1sum' [14:52:01] Info: Previous file attributes were stored [14:52:01] Info: Enabled tests are: all [14:52:01] Info: Disabled tests are: suspscan hidden_procs deleted_files packet_cap_apps [14:52:01] Info: Found ksym file '/proc/kallsyms' [14:52:01] [14:52:01] Checking if the O/S has changed since last time... [14:52:01] Info: Nothing seems to have changed [14:52:02] [14:52:02] Starting system checks... [14:52:02] [14:52:02] Checking system commands... [14:52:02] Info: Starting test name 'system_commands' [14:52:02] [14:52:02] Performing 'strings' command checks [14:52:02] Info: Starting test name 'strings' [14:52:02] Scanning for string /usr/sbin/ntpsx [ OK ] [14:52:02] Scanning for string /usr/lib/.../ls [ OK ] [14:52:02] Scanning for string /usr/lib/.../netstat [ OK ] [14:52:03] Scanning for string /usr/lib/.../lsof [ OK ] [14:52:03] Scanning for string /usr/lib/.../bkit-ssh/bkit-shdcfg [ OK ] [14:52:03] Scanning for string /usr/lib/.../bkit-ssh/bkit-shhk [ OK ] [14:52:03] Scanning for string /usr/lib/.../bkit-ssh/bkit-pw [ OK ] [14:52:03] Scanning for string /usr/lib/.../bkit-ssh/bkit-shrs [ OK ] [14:52:03] Scanning for string /usr/lib/.../uconf.inv [ OK ] [14:52:04] Scanning for string /usr/lib/.../psr [ OK ] [14:52:04] Scanning for string /usr/lib/.../find [ OK ] [14:52:04] Scanning for string /usr/lib/.../pstree [ OK ] [14:52:04] Scanning for string /usr/lib/.../slocate [ OK ] [14:52:04] Scanning for string /usr/lib/.../du [ OK ] [14:52:04] Scanning for string /usr/lib/.../top [ OK ] [14:52:05] Scanning for string /usr/lib/... [ OK ] [14:52:05] Scanning for string /usr/lib/.../bkit-ssh [ OK ] [14:52:05] Scanning for string /usr/lib/.bkit- [ OK ] [14:52:05] Scanning for string /tmp/.bkp [ OK ] [14:52:05] Scanning for string /tmp/.cinik [ OK ] [14:52:06] Scanning for string /tmp/.font-unix/.cinik [ OK ] [14:52:06] Scanning for string /lib/.sso [ OK ] [14:52:06] Scanning for string /lib/.so [ OK ] [14:52:06] Scanning for string /var/run/...dica/clean [ OK ] [14:52:06] Scanning for string /var/run/...dica/xl [ OK ] [14:52:06] Scanning for string /var/run/...dica/xdr [ OK ] [14:52:07] Scanning for string /var/run/...dica/psg [ OK ] [14:52:07] Scanning for string /var/run/...dica/secure [ OK ] [14:52:07] Scanning for string /var/run/...dica/rdx [ OK ] [14:52:07] Scanning for string /var/run/...dica/va [ OK ] [14:52:07] Scanning for string /var/run/...dica/cl.sh [ OK ] [14:52:07] Scanning for string /usr/bin/.etc [ OK ] [14:52:08] Scanning for string /usr/lib/.fx/sched_host.2 [ OK ] [14:52:08] Scanning for string /usr/lib/.fx/random_d.2 [ OK ] [14:52:08] Scanning for string /usr/lib/.fx/set_pid.2 [ OK ] [14:52:08] Scanning for string /usr/lib/.fx/cons.saver [ OK ] [14:52:08] Scanning for string /usr/lib/.fx/adore/adore/adore.ko [ OK ] [14:52:08] Scanning for string /bin/sysback [ OK ] [14:52:09] Scanning for string /usr/local/bin/sysback [ OK ] [14:52:09] Scanning for string /usr/lib/.tbd [ OK ] [14:52:09] Scanning for string /dev/.lib/lib/lib/t0rns [ OK ] [14:52:09] Scanning for string /dev/.lib/lib/lib/du [ OK ] [14:52:09] Scanning for string /dev/.lib/lib/lib/ls [ OK ] [14:52:09] Scanning for string /dev/.lib/lib/lib/t0rnsb [ OK ] [14:52:10] Scanning for string /dev/.lib/lib/lib/ps [ OK ] [14:52:10] Scanning for string /dev/.lib/lib/lib/t0rnp [ OK ] [14:52:10] Scanning for string /dev/.lib/lib/lib/find [ OK ] [14:52:10] Scanning for string /dev/.lib/lib/lib/ifconfig [ OK ] [14:52:11] Scanning for string /dev/.lib/lib/lib/pg [ OK ] [14:52:11] Scanning for string /dev/.lib/lib/lib/ssh.tgz [ OK ] [14:52:11] Scanning for string /dev/.lib/lib/lib/top [ OK ] [14:52:11] Scanning for string /dev/.lib/lib/lib/sz [ OK ] [14:52:11] Scanning for string /dev/.lib/lib/lib/login [ OK ] [14:52:11] Scanning for string /dev/.lib/lib/lib/in.fingerd [ OK ] [14:52:12] Scanning for string /dev/.lib/lib/lib/1i0n.sh [ OK ] [14:52:12] Scanning for string /dev/.lib/lib/lib/pstree [ OK ] [14:52:12] Scanning for string /dev/.lib/lib/lib/in.telnetd [ OK ] [14:52:12] Scanning for string /dev/.lib/lib/lib/mjy [ OK ] [14:52:13] Scanning for string /dev/.lib/lib/lib/sush [ OK ] [14:52:13] Scanning for string /dev/.lib/lib/lib/tfn [ OK ] [14:52:13] Scanning for string /dev/.lib/lib/lib/name [ OK ] [14:52:15] Scanning for string /dev/.lib/lib/lib/getip.sh [ OK ] [14:52:15] Scanning for string /usr/info/.torn/sh* [ OK ] [14:52:15] Scanning for string /usr/src/.puta/.1addr [ OK ] [14:52:15] Scanning for string /usr/src/.puta/.1file [ OK ] [14:52:15] Scanning for string /usr/src/.puta/.1proc [ OK ] [14:52:15] Scanning for string /usr/src/.puta/.1logz [ OK ] [14:52:15] Scanning for string /usr/info/.t0rn [ OK ] [14:52:16] Scanning for string /dev/.lib [ OK ] [14:52:16] Scanning for string /dev/.lib/lib [ OK ] [14:52:16] Scanning for string /dev/.lib/lib/lib [ OK ] [14:52:16] Scanning for string /dev/.lib/lib/lib/dev [ OK ] [14:52:16] Scanning for string /dev/.lib/lib/scan [ OK ] [14:52:16] Scanning for string /usr/src/.puta [ OK ] [14:52:16] Scanning for string /usr/man/man1/man1 [ OK ] [14:52:16] Scanning for string /usr/man/man1/man1/lib [ OK ] [14:52:17] Scanning for string /usr/man/man1/man1/lib/.lib [ OK ] [14:52:17] Scanning for string /usr/man/man1/man1/lib/.lib/.backup [ OK ] [14:52:17] [14:52:17] Performing 'shared libraries' checks [14:52:17] Info: Starting test name 'shared_libs' [14:52:17] Checking for preloading variables [ None found ] [14:52:17] Checking for preload file [ Not found ] [14:52:17] Info: Starting test name 'shared_libs_path' [14:52:17] Checking LD_LIBRARY_PATH variable [ Not found ] [14:52:17] [14:52:17] Performing file properties checks [14:52:17] Info: Starting test name 'properties' [14:52:17] Checking for prerequisites [ OK ] [14:52:18] /bin/bash [ OK ] [14:52:18] /bin/cat [ OK ] [14:52:19] /bin/chmod [ OK ] [14:52:20] /bin/chown [ OK ] [14:52:20] /bin/cp [ OK ] [14:52:20] /bin/date [ OK ] [14:52:20] /bin/df [ OK ] [14:52:21] /bin/dmesg [ OK ] [14:52:21] /bin/echo [ OK ] [14:52:22] /bin/ed [ OK ] [14:52:22] /bin/egrep [ OK ] [14:52:22] Info: Found file '/bin/egrep': it is whitelisted for the 'script replacement' check. [14:52:22] /bin/fgrep [ OK ] [14:52:23] Info: Found file '/bin/fgrep': it is whitelisted for the 'script replacement' check. [14:52:23] /bin/grep [ OK ] [14:52:24] /bin/ip [ OK ] [14:52:25] /bin/kill [ OK ] [14:52:25] /bin/login [ OK ] [14:52:25] /bin/ls [ OK ] [14:52:26] /bin/lsmod [ OK ] [14:52:26] /bin/mktemp [ OK ] [14:52:27] /bin/more [ OK ] [14:52:27] /bin/mount [ OK ] [14:52:28] /bin/mv [ OK ] [14:52:28] /bin/netstat [ OK ] [14:52:28] /bin/ps [ OK ] [14:52:29] /bin/pwd [ OK ] [14:52:29] /bin/readlink [ OK ] [14:52:30] /bin/sed [ OK ] [14:52:30] /bin/sh [ OK ] [14:52:31] /bin/su [ OK ] [14:52:32] /bin/touch [ OK ] [14:52:32] /bin/uname [ OK ] [14:52:33] /bin/which [ OK ] [14:52:33] Info: Found file '/bin/which': it is whitelisted for the 'script replacement' check. [14:52:34] /bin/dash [ OK ] [14:52:34] /usr/bin/awk [ OK ] [14:52:35] /usr/bin/basename [ OK ] [14:52:35] /usr/bin/chattr [ OK ] [14:52:36] /usr/bin/cut [ OK ] [14:52:36] /usr/bin/diff [ OK ] [14:52:36] /usr/bin/dirname [ OK ] [14:52:37] /usr/bin/dpkg [ OK ] [14:52:37] /usr/bin/dpkg-query [ OK ] [14:52:38] /usr/bin/du [ OK ] [14:52:38] /usr/bin/env [ OK ] [14:52:38] /usr/bin/file [ OK ] [14:52:39] /usr/bin/find [ OK ] [14:52:39] /usr/bin/GET [ OK ] [14:52:39] /usr/bin/groups [ OK ] [14:52:40] Info: Found file '/usr/bin/groups': it is whitelisted for the 'script replacement' check. [14:52:40] /usr/bin/head [ OK ] [14:52:40] /usr/bin/id [ OK ] [14:52:41] /usr/bin/killall [ OK ] [14:52:41] /usr/bin/last [ OK ] [14:52:42] /usr/bin/lastlog [ OK ] [14:52:42] /usr/bin/ldd [ OK ] [14:52:42] Info: Found file '/usr/bin/ldd': it is whitelisted for the 'script replacement' check. [14:52:42] /usr/bin/less [ OK ] [14:52:43] /usr/bin/locate [ OK ] [14:52:43] /usr/bin/logger [ OK ] [14:52:44] /usr/bin/lsattr [ OK ] [14:52:44] /usr/bin/lsof [ OK ] [14:52:45] /usr/bin/md5sum [ OK ] [14:52:45] /usr/bin/mlocate [ OK ] [14:52:46] /usr/bin/newgrp [ OK ] [14:52:47] /usr/bin/passwd [ OK ] [14:52:47] /usr/bin/perl [ OK ] [14:52:48] /usr/bin/pstree [ OK ] [14:52:48] /usr/bin/rkhunter [ OK ] [14:52:48] /usr/bin/rpm [ OK ] [14:52:49] /usr/bin/runcon [ OK ] [14:52:49] /usr/bin/sha1sum [ OK ] [14:52:50] /usr/bin/size [ OK ] [14:52:50] /usr/bin/sort [ OK ] [14:52:50] /usr/bin/stat [ OK ] [14:52:51] /usr/bin/strace [ OK ] [14:52:51] /usr/bin/strings [ OK ] [14:52:52] /usr/bin/sudo [ OK ] [14:52:53] /usr/bin/tail [ OK ] [14:52:53] /usr/bin/test [ OK ] [14:52:53] /usr/bin/top [ OK ] [14:52:54] /usr/bin/touch [ OK ] [14:52:54] /usr/bin/tr [ OK ] [14:52:55] /usr/bin/uniq [ OK ] [14:52:55] /usr/bin/users [ OK ] [14:52:56] /usr/bin/vmstat [ OK ] [14:52:56] /usr/bin/w [ OK ] [14:52:57] /usr/bin/watch [ OK ] [14:52:57] /usr/bin/wc [ OK ] [14:52:57] /usr/bin/wget [ OK ] [14:52:58] /usr/bin/whatis [ OK ] [14:52:58] /usr/bin/whereis [ OK ] [14:52:59] /usr/bin/which [ OK ] [14:52:59] /usr/bin/who [ OK ] [14:52:59] /usr/bin/whoami [ OK ] [14:53:00] /usr/bin/mawk [ OK ] [14:53:00] /usr/bin/lwp-request [ OK ] [14:53:01] Info: Found file '/usr/bin/lwp-request': it is whitelisted for the 'script replacement' check. [14:53:01] /usr/bin/w.procps [ OK ] [14:53:02] /sbin/depmod [ OK ] [14:53:02] /sbin/ifconfig [ OK ] [14:53:03] /sbin/ifdown [ OK ] [14:53:03] /sbin/ifup [ OK ] [14:53:03] /sbin/init [ OK ] [14:53:04] /sbin/insmod [ OK ] [14:53:04] /sbin/ip [ OK ] [14:53:05] /sbin/lsmod [ OK ] [14:53:05] /sbin/modinfo [ OK ] [14:53:05] /sbin/modprobe [ OK ] [14:53:06] /sbin/rmmod [ OK ] [14:53:07] /sbin/runlevel [ OK ] [14:53:07] /sbin/sulogin [ OK ] [14:53:08] /sbin/sysctl [ OK ] [14:53:08] /sbin/syslogd [ OK ] [14:53:09] /usr/sbin/adduser [ OK ] [14:53:09] Info: Found file '/usr/sbin/adduser': it is whitelisted for the 'script replacement' check. [14:53:09] /usr/sbin/chroot [ OK ] [14:53:10] /usr/sbin/cron [ OK ] [14:53:10] /usr/sbin/groupadd [ OK ] [14:53:11] /usr/sbin/groupdel [ OK ] [14:53:11] /usr/sbin/groupmod [ OK ] [14:53:12] /usr/sbin/grpck [ OK ] [14:53:12] /usr/sbin/nologin [ OK ] [14:53:13] /usr/sbin/pwck [ OK ] [14:53:13] /usr/sbin/tcpd [ OK ] [14:53:14] /usr/sbin/useradd [ OK ] [14:53:15] /usr/sbin/userdel [ OK ] [14:53:15] /usr/sbin/usermod [ OK ] [14:53:15] /usr/sbin/vipw [ OK ] [14:53:40] [14:53:40] Checking for rootkits... [14:53:40] Info: Starting test name 'rootkits' [14:53:40] [14:53:40] Performing check of known rootkit files and directories [14:53:40] Info: Starting test name 'known_rkts' [14:53:40] [14:53:40] Checking for 55808 Trojan - Variant A... [14:53:40] Checking for file '/tmp/.../r' [ Not found ] [14:53:41] Checking for file '/tmp/.../a' [ Not found ] [14:53:41] 55808 Trojan - Variant A [ Not found ] [14:53:41] [14:53:41] Checking for ADM Worm... [14:53:41] Checking for string 'w0rm' [ Not found ] [14:53:41] ADM Worm [ Not found ] [14:53:41] [14:53:41] Checking for AjaKit Rootkit... [14:53:41] Checking for file '/dev/tux/.addr' [ Not found ] [14:53:41] Checking for file '/dev/tux/.proc' [ Not found ] [14:53:41] Checking for file '/dev/tux/.file' [ Not found ] [14:53:41] Checking for file '/lib/.libgh-gh/cleaner' [ Not found ] [14:53:41] Checking for file '/lib/.libgh-gh/Patch/patch' [ Not found ] [14:53:42] Checking for file '/lib/.libgh-gh/sb0k' [ Not found ] [14:53:42] Checking for directory '/dev/tux' [ Not found ] [14:53:42] Checking for directory '/lib/.libgh-gh' [ Not found ] [14:53:42] AjaKit Rootkit [ Not found ] [14:53:42] [14:53:42] Checking for aPa Kit... [14:53:42] Checking for file '/usr/share/.aPa' [ Not found ] [14:53:42] aPa Kit [ Not found ] [14:53:42] [14:53:42] Checking for Apache Worm... [14:53:42] Checking for file '/bin/.log' [ Not found ] [14:53:42] Apache Worm [ Not found ] [14:53:43] [14:53:43] Checking for Ambient (ark) Rootkit... [14:53:43] Checking for file '/usr/lib/.ark?' [ Not found ] [14:53:43] Checking for file '/dev/ptyxx/.log' [ Not found ] [14:53:43] Checking for file '/dev/ptyxx/.file' [ Not found ] [14:53:43] Checking for directory '/dev/ptyxx' [ Not found ] [14:53:43] Ambient (ark) Rootkit [ Not found ] [14:53:43] [14:53:43] Checking for Balaur Rootkit... [14:53:43] Checking for file '/usr/lib/liblog.o' [ Not found ] [14:53:43] Checking for directory '/usr/lib/.kinetic' [ Not found ] [14:53:44] Checking for directory '/usr/lib/.egcs' [ Not found ] [14:53:44] Checking for directory '/usr/lib/.wormie' [ Not found ] [14:53:44] Balaur Rootkit [ Not found ] [14:53:44] [14:53:44] Checking for BeastKit Rootkit... [14:53:44] Checking for file '/usr/sbin/arobia' [ Not found ] [14:53:44] Checking for file '/usr/sbin/idrun' [ Not found ] [14:53:44] Checking for file '/usr/lib/elm/arobia/elm' [ Not found ] [14:53:44] Checking for file '/usr/lib/elm/arobia/elm/hk' [ Not found ] [14:53:44] Checking for file '/usr/lib/elm/arobia/elm/hk.pub' [ Not found ] [14:53:45] Checking for file '/usr/lib/elm/arobia/elm/sc' [ Not found ] [14:53:45] Checking for file '/usr/lib/elm/arobia/elm/sd.pp' [ Not found ] [14:53:45] Checking for file '/usr/lib/elm/arobia/elm/sdco' [ Not found ] [14:53:45] Checking for file '/usr/lib/elm/arobia/elm/srsd' [ Not found ] [14:53:45] Checking for directory '/lib/ldd.so/bktools' [ Not found ] [14:53:45] BeastKit Rootkit [ Not found ] [14:53:45] [14:53:45] Checking for beX2 Rootkit... [14:53:45] Checking for directory '/usr/include/bex' [ Not found ] [14:53:45] beX2 Rootkit [ Not found ] [14:53:45] [14:53:45] Checking for BOBKit Rootkit... [14:53:45] Checking for file '/usr/sbin/ntpsx' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../ls' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../netstat' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../lsof' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../bkit-ssh/bkit-shdcfg' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../bkit-ssh/bkit-shhk' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../bkit-ssh/bkit-pw' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../bkit-ssh/bkit-shrs' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../uconf.inv' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../psr' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../find' [ Not found ] [14:53:47] Checking for file '/usr/lib/.../pstree' [ Not found ] [14:53:47] Checking for file '/usr/lib/.../slocate' [ Not found ] [14:53:47] Checking for file '/usr/lib/.../du' [ Not found ] [14:53:47] Checking for file '/usr/lib/.../top' [ Not found ] [14:53:47] Checking for directory '/usr/lib/...' [ Not found ] [14:53:47] Checking for directory '/usr/lib/.../bkit-ssh' [ Not found ] [14:53:47] Checking for directory '/usr/lib/.bkit-' [ Not found ] [14:53:47] Checking for directory '/tmp/.bkp' [ Not found ] [14:53:47] BOBKit Rootkit [ Not found ] [14:53:48] [14:53:48] Checking for CiNIK Worm (Slapper.B variant)... [14:53:48] Checking for file '/tmp/.cinik' [ Not found ] [14:53:48] Checking for directory '/tmp/.font-unix/.cinik' [ Not found ] [14:53:48] CiNIK Worm (Slapper.B variant) [ Not found ] [14:53:48] [14:53:48] Checking for Danny-Boy's Abuse Kit... [14:53:48] Checking for file '/dev/mdev' [ Not found ] [14:53:48] Checking for file '/usr/lib/libX.a' [ Not found ] [14:53:48] Danny-Boy's Abuse Kit [ Not found ] [14:53:48] [14:53:48] Checking for Devil RootKit... [14:53:48] Checking for file '/var/lib/games/.src' [ Not found ] [14:53:49] Checking for file '/dev/dsx' [ Not found ] [14:53:49] Checking for file '/dev/caca' [ Not found ] [14:53:49] Devil RootKit [ Not found ] [14:53:49] [14:53:49] Checking for Dica-Kit Rootkit... [14:53:49] Checking for file '/lib/.sso' [ Not found ] [14:53:49] Checking for file '/lib/.so' [ Not found ] [14:53:49] Checking for file '/var/run/...dica/clean' [ Not found ] [14:53:49] Checking for file '/var/run/...dica/xl' [ Not found ] [14:53:49] Checking for file '/var/run/...dica/xdr' [ Not found ] [14:53:50] Checking for file '/var/run/...dica/psg' [ Not found ] [14:53:50] Checking for file '/var/run/...dica/secure' [ Not found ] [14:53:50] Checking for file '/var/run/...dica/rdx' [ Not found ] [14:53:50] Checking for file '/var/run/...dica/va' [ Not found ] [14:53:50] Checking for file '/var/run/...dica/cl.sh' [ Not found ] [14:53:50] Checking for file '/usr/bin/.etc' [ Not found ] [14:53:50] Checking for directory '/var/run/...dica' [ Not found ] [14:53:50] Checking for directory '/var/run/...dica/mh' [ Not found ] [14:53:50] Checking for directory '/var/run/...dica/scan' [ Not found ] [14:53:50] Dica-Kit Rootkit [ Not found ] [14:53:51] [14:53:51] Checking for Dreams Rootkit... [14:53:51] Checking for file '/dev/ttyoa' [ Not found ] [14:53:51] Checking for file '/dev/ttyof' [ Not found ] [14:53:51] Checking for file '/dev/ttyop' [ Not found ] [14:53:51] Checking for file '/usr/bin/sense' [ Not found ] [14:53:51] Checking for file '/usr/bin/sl2' [ Not found ] [14:53:51] Checking for file '/usr/bin/logclear' [ Not found ] [14:53:51] Checking for file '/usr/bin/(swapd)' [ Not found ] [14:53:51] Checking for file '/usr/bin/snfs' [ Not found ] [14:53:51] Checking for file '/usr/lib/libsss' [ Not found ] [14:53:52] Checking for directory '/dev/ida/.hpd' [ Not found ] [14:53:52] Dreams Rootkit [ Not found ] [14:53:52] [14:53:52] Checking for Duarawkz Rootkit... [14:53:52] Checking for file '/usr/bin/duarawkz/loginpass' [ Not found ] [14:53:52] Checking for directory '/usr/bin/duarawkz' [ Not found ] [14:53:52] Duarawkz Rootkit [ Not found ] [14:53:52] [14:53:52] Checking for Enye LKM... [14:53:52] Checking for file '/etc/.enyelkmHIDE^IT.ko' [ Not found ] [14:53:52] Enye LKM [ Not found ] [14:53:52] [14:53:52] Checking for Flea Linux Rootkit... [14:53:52] Checking for file '/etc/ld.so.hash' [ Not found ] [14:53:52] Checking for file '/lib/security/.config/ssh/ssh_host_key' [ Not found ] [14:53:53] Checking for file '/lib/security/.config/ssh/ssh_host_key.pub' [ Not found ] [14:53:53] Checking for file '/lib/security/.config/ssh/ssh_random_seed' [ Not found ] [14:53:53] Checking for file '/usr/bin/ssh2d' [ Not found ] [14:53:53] Checking for file '/usr/lib/ldlibns.so' [ Not found ] [14:53:53] Checking for file '/usr/lib/ldlibpst.so' [ Not found ] [14:53:53] Checking for file '/usr/lib/ldlibdu.so' [ Not found ] [14:53:53] Checking for file '/usr/lib/ldlibct.so' [ Not found ] [14:53:53] Checking for directory '/lib/security/.config/ssh' [ Not found ] [14:53:53] Checking for directory '/dev/..0' [ Not found ] [14:53:54] Checking for directory '/dev/..0/backup' [ Not found ] [14:53:54] Flea Linux Rootkit [ Not found ] [14:53:54] [14:53:54] Checking for FreeBSD Rootkit... [14:53:54] Checking for file '/usr/lib/.fx/sched_host.2' [ Not found ] [14:53:54] Checking for file '/usr/lib/.fx/random_d.2' [ Not found ] [14:53:54] Checking for file '/usr/lib/.fx/set_pid.2' [ Not found ] [14:53:54] Checking for file '/usr/lib/.fx/cons.saver' [ Not found ] [14:53:54] Checking for file '/usr/lib/.fx/adore/adore/adore.ko' [ Not found ] [14:53:54] Checking for file '/bin/sysback' [ Not found ] [14:53:54] Checking for file '/usr/local/bin/sysback' [ Not found ] [14:53:55] Checking for directory '/usr/lib/.fx' [ Not found ] [14:53:55] Checking for directory '/usr/lib/.fx/adore' [ Not found ] [14:53:55] FreeBSD Rootkit [ Not found ] [14:53:55] [14:53:55] Checking for f***`it Rootkit... [14:53:55] Checking for file '/dev/proc/fuckit/hax0r' [ Not found ] [14:53:55] Checking for file '/dev/proc/fuckit/hax0rshell' [ Not found ] [14:53:55] Checking for file '/dev/proc/fuckit/config/lports' [ Not found ] [14:53:55] Checking for file '/dev/proc/fuckit/config/rports' [ Not found ] [14:53:55] Checking for file '/dev/proc/fuckit/config/rkconf' [ Not found ] [14:53:56] Checking for file '/dev/proc/fuckit/config/password' [ Not found ] [14:53:56] Checking for file '/dev/proc/fuckit/config/progs' [ Not found ] [14:53:56] Checking for file '/dev/proc/system-bins/init' [ Not found ] [14:53:56] f***`it Rootkit [ Not found ] [14:53:56] [14:53:56] Checking for GasKit Rootkit... [14:53:56] Checking for file '/dev/dev/gaskit/sshd/sshdd' [ Not found ] [14:53:56] Checking for directory '/dev/dev' [ Not found ] [14:53:56] Checking for directory '/dev/dev/gaskit' [ Not found ] [14:53:56] Checking for directory '/dev/dev/gaskit/sshd' [ Not found ] [14:53:57] GasKit Rootkit [ Not found ] [14:53:57] [14:53:57] Checking for Heroin LKM... [14:53:57] Checking for kernel symbol 'heroin' [ Not found ] [14:53:57] Heroin LKM [ Not found ] [14:53:57] [14:53:57] Checking for HjC Kit... [14:53:57] Checking for directory '/dev/.hijackerz' [ Not found ] [14:53:57] HjC Kit [ Not found ] [14:53:57] [14:53:57] Checking for ignoKit Rootkit... [14:53:57] Checking for file '/lib/defs/p' [ Not found ] [14:53:57] Checking for file '/lib/defs/q' [ Not found ] [14:53:58] Checking for file '/lib/defs/r' [ Not found ] [14:53:58] Checking for file '/lib/defs/s' [ Not found ] [14:53:58] Checking for file '/lib/defs/t' [ Not found ] [14:53:58] Checking for file '/usr/lib/defs/p' [ Not found ] [14:53:58] Checking for file '/usr/lib/defs/q' [ Not found ] [14:53:58] Checking for file '/usr/lib/defs/r' [ Not found ] [14:53:58] Checking for file '/usr/lib/defs/s' [ Not found ] [14:53:58] Checking for file '/usr/lib/defs/t' [ Not found ] [14:53:58] Checking for file '/usr/lib/.libigno/pkunsec' [ Not found ] [14:53:58] Checking for file '/usr/lib/.libigno/.igno/psybnc/psybnc' [ Not found ] [14:53:59] Checking for directory '/usr/lib/.libigno' [ Not found ] [14:53:59] Checking for directory '/usr/lib/.libigno/.igno' [ Not found ] [14:53:59] ignoKit Rootkit [ Not found ] [14:53:59] [14:53:59] Checking for ImperalsS-FBRK Rootkit... [14:53:59] Checking for directory '/dev/fd/.88' [ Not found ] [14:53:59] Checking for directory '/dev/fd/.99' [ Not found ] [14:53:59] ImperalsS-FBRK Rootkit [ Not found ] [14:53:59] [14:53:59] Checking for Irix Rootkit... [14:53:59] Checking for directory '/dev/pts/01' [ Not found ] [14:54:00] Checking for directory '/dev/pts/01/backup' [ Not found ] [14:54:00] Checking for directory '/dev/pts/01/etc' [ Not found ] [14:54:00] Checking for directory '/dev/pts/01/tmp' [ Not found ] [14:54:00] Irix Rootkit [ Not found ] [14:54:00] [14:54:00] Checking for Kitko Rootkit... [14:54:00] Checking for directory '/usr/src/redhat/SRPMS/...' [ Not found ] [14:54:00] Kitko Rootkit [ Not found ] [14:54:00] [14:54:00] Checking for Knark Rootkit... [14:54:00] Checking for file '/proc/knark/pids' [ Not found ] [14:54:00] Checking for directory '/proc/knark' [ Not found ] [14:54:01] Knark Rootkit [ Not found ] [14:54:01] [14:54:01] Checking for Li0n Worm... [14:54:01] Checking for file '/bin/in.telnetd' [ Not found ] [14:54:01] Checking for file '/bin/mjy' [ Not found ] [14:54:01] Checking for file '/usr/man/man1/man1/lib/.lib/mjy' [ Not found ] [14:54:01] Checking for file '/usr/man/man1/man1/lib/.lib/in.telnetd' [ Not found ] [14:54:01] Checking for file '/usr/man/man1/man1/lib/.lib/.x' [ Not found ] [14:54:01] Checking for file '/dev/.lib/lib/scan/1i0n.sh' [ Not found ] [14:54:01] Checking for file '/dev/.lib/lib/scan/hack.sh' [ Not found ] [14:54:01] Checking for file '/dev/.lib/lib/scan/bind' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/scan/randb' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/scan/scan.sh' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/scan/pscan' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/scan/star.sh' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/scan/bindx.sh' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/scan/bindname.log' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/1i0n.sh' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/lib/netstat' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/lib/dev/.1addr' [ Not found ] [14:54:03] Checking for file '/dev/.lib/lib/lib/dev/.1logz' [ Not found ] [14:54:03] Checking for file '/dev/.lib/lib/lib/dev/.1proc' [ Not found ] [14:54:03] Checking for file '/dev/.lib/lib/lib/dev/.1file' [ Not found ] [14:54:03] Li0n Worm [ Not found ] [14:54:03] [14:54:03] Checking for Lockit / LJK2 Rootkit... [14:54:03] Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_config' [ Not found ] [14:54:03] Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_host_key' [ Not found ] [14:54:03] Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_host_key.pub' [ Not found ] [14:54:03] Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_random_seed*' [ Not found ] [14:54:03] Checking for file '/usr/lib/libmen.oo/.LJK2/sshd_config' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backdoor/RK1bd' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/du' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ifconfig' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/inetd.conf' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/locate' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/login' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ls' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/netstat' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ps' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/pstree' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/rc.sysinit' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/syslogd' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/tcpd' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/top' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/clean/RK1sauber' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/clean/RK1wted' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/hack/RK1parser' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/hack/RK1sniff' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1addr' [ Not found ] [14:54:06] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1dir' [ Not found ] [14:54:06] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1log' [ Not found ] [14:54:06] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1proc' [ Not found ] [14:54:06] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/RK1phidemod.c' [ Not found ] [14:54:06] Checking for file '/usr/lib/libmen.oo/.LJK2/modules/README.modules' [ Not found ] [14:54:06] Checking for file '/usr/lib/libmen.oo/.LJK2/modules/RK1hidem.c' [ Not found ] [14:54:06] Checking for file '/usr/lib/libmen.oo/.LJK2/modules/RK1phide' [ Not found ] [14:54:06] Checking for file '/usr/lib/libmen.oo/.LJK2/sshconfig/RK1ssh' [ Not found ] [14:54:06] Checking for directory '/usr/lib/libmen.oo/.LJK2' [ Not found ] [14:54:07] Lockit / LJK2 Rootkit [ Not found ] [14:54:07] [14:54:07] Checking for Mood-NT Rootkit... [14:54:07] Checking for file '/sbin/init__mood-nt-_-_cthulhu' [ Not found ] [14:54:07] Checking for file '/_cthulhu/mood-nt.init' [ Not found ] [14:54:07] Checking for file '/_cthulhu/mood-nt.conf' [ Not found ] [14:54:07] Checking for file '/_cthulhu/mood-nt.sniff' [ Not found ] [14:54:07] Checking for directory '/_cthulhu' [ Not found ] [14:54:07] Mood-NT Rootkit [ Not found ] [14:54:07] [14:54:07] Checking for MRK Rootkit... [14:54:08] Checking for file '/dev/ida/.inet/pid' [ Not found ] [14:54:08] Checking for file '/dev/ida/.inet/ssh_host_key' [ Not found ] [14:54:08] Checking for file '/dev/ida/.inet/ssh_random_seed' [ Not found ] [14:54:08] Checking for file '/dev/ida/.inet/tcp.log' [ Not found ] [14:54:08] Checking for directory '/dev/ida/.inet' [ Not found ] [14:54:08] Checking for directory '/var/spool/cron/.sh' [ Not found ] [14:54:08] MRK Rootkit [ Not found ] [14:54:08] [14:54:08] Checking for Ni0 Rootkit... [14:54:08] Checking for file '/var/lock/subsys/...datafile.../...net...' [ Not found ] [14:54:08] Checking for file '/var/lock/subsys/...datafile.../...port...' [ Not found ] [14:54:08] Checking for file '/var/lock/subsys/...datafile.../...ps...' [ Not found ] [14:54:09] Checking for file '/var/lock/subsys/...datafile.../...file...' [ Not found ] [14:54:09] Checking for directory '/tmp/waza' [ Not found ] [14:54:09] Checking for directory '/var/lock/subsys/...datafile...' [ Not found ] [14:54:09] Checking for directory '/usr/sbin/es' [ Not found ] [14:54:09] Ni0 Rootkit [ Not found ]