rkhunter

από **taratatzoum** » 20 Δεκ 2008, 01:07

τα αποτελέσματα από sudo rkhunter -c στο terminal, το σπαω σε 2 post γιατί ξεπερνάω το μεγιστο αριθμό χαρακτήρων,
καποιος εμπειρος μου επεξηγεί γιατι τοσα Warning ?
γιατρέ μου θα ζήσω? :mrgreen:

Κώδικας: Επιλογή όλων: [23:44:30] Running Rootkit Hunter version 1.3.0 on dell-rizitis [23:44:30] [23:44:30] Info: Start date is Παρ 19 Δεκ 2008 11:44:30 μμ EET [23:44:31] [23:44:31] Checking configuration file and command-line options... [23:44:31] Info: Detected operating system is 'Linux' [23:44:31] Info: Found O/S name: Ubuntu 8.04.1 [23:44:31] Info: Command line is /usr/bin/rkhunter -c [23:44:31] Info: Environment shell is /bin/bash; rkhunter is using dash [23:44:31] Info: Using configuration file '/etc/rkhunter.conf' [23:44:31] Info: Installation directory is '/usr' [23:44:31] Info: Using language 'en' [23:44:31] Info: Using '/var/lib/rkhunter/db' as the database directory [23:44:31] Info: Using '/usr/share/rkhunter/scripts' as the support script directory [23:44:31] Info: Using '/usr/local/sbin /usr/local/bin /usr/sbin /usr/bin /sbin /bin /usr/X11R6/bin /bin /usr/bin /sbin /usr/sbin /usr/local/bin /usr/local/sbin /usr/libexec /usr/local/libexec' as the command directories [23:44:31] Info: Using '/' as the root directory [23:44:31] Info: Using '/var/lib/rkhunter/tmp' as the temporary directory [23:44:31] Info: No mail-on-warning address configured [23:44:31] Info: X will automatically be detected [23:44:31] Info: Using second color set [23:44:31] Info: Found the 'diff' command: /usr/bin/diff [23:44:31] Info: Found the 'file' command: /usr/bin/file [23:44:32] Info: Found the 'find' command: /usr/bin/find [23:44:32] Info: Found the 'ifconfig' command: /sbin/ifconfig [23:44:32] Info: Found the 'ip' command: /sbin/ip [23:44:32] Info: Found the 'ldd' command: /usr/bin/ldd [23:44:32] Info: Found the 'lsattr' command: /usr/bin/lsattr [23:44:32] Info: Found the 'lsmod' command: /sbin/lsmod [23:44:32] Info: Found the 'lsof' command: /usr/bin/lsof [23:44:32] Info: Found the 'mktemp' command: /bin/mktemp [23:44:32] Info: Found the 'netstat' command: /bin/netstat [23:44:32] Info: Found the 'perl' command: /usr/bin/perl [23:44:32] Info: Found the 'ps' command: /bin/ps [23:44:32] Info: Found the 'pwd' command: /bin/pwd [23:44:32] Info: Found the 'readlink' command: /bin/readlink [23:44:32] Info: Found the 'sort' command: /usr/bin/sort [23:44:32] Info: Found the 'stat' command: /usr/bin/stat [23:44:32] Info: Found the 'strings' command: /usr/bin/strings [23:44:32] Info: Found the 'uniq' command: /usr/bin/uniq [23:44:33] Info: System is not using prelinking [23:44:33] Info: Using the '/usr/bin/sha1sum' command for the file hash checks [23:44:33] Info: Stored hash values used hash function '/usr/bin/sha1sum' [23:44:33] Info: Stored hash values did not use a package manager [23:44:33] Info: The hash function field index is set to 1 [23:44:33] Info: No package manager specified: using hash function '/usr/bin/sha1sum' [23:44:33] Info: Previous file attributes were stored [23:44:33] Info: Enabled tests are: all [23:44:33] Info: Disabled tests are: suspscan hidden_procs deleted_files packet_cap_apps [23:44:33] Info: Found ksym file '/proc/kallsyms' [23:44:33] [23:44:33] Checking if the O/S has changed since last time... [23:44:33] Info: Nothing seems to have changed [23:44:33] [23:44:33] Starting system checks... [23:44:33] [23:44:33] Checking system commands... [23:44:33] Info: Starting test name 'system_commands' [23:44:33] [23:44:33] Performing 'strings' command checks [23:44:33] Info: Starting test name 'strings' [23:44:34] Scanning for string /usr/sbin/ntpsx [ OK ] [23:44:34] Scanning for string /usr/lib/.../ls [ OK ] [23:44:34] Scanning for string /usr/lib/.../netstat [ OK ] [23:44:34] Scanning for string /usr/lib/.../lsof [ OK ] [23:44:34] Scanning for string /usr/lib/.../bkit-ssh/bkit-shdcfg [ OK ] [23:44:34] Scanning for string /usr/lib/.../bkit-ssh/bkit-shhk [ OK ] [23:44:34] Scanning for string /usr/lib/.../bkit-ssh/bkit-pw [ OK ] [23:44:34] Scanning for string /usr/lib/.../bkit-ssh/bkit-shrs [ OK ] [23:44:34] Scanning for string /usr/lib/.../uconf.inv [ OK ] [23:44:35] Scanning for string /usr/lib/.../psr [ OK ] [23:44:35] Scanning for string /usr/lib/.../find [ OK ] [23:44:35] Scanning for string /usr/lib/.../pstree [ OK ] [23:44:35] Scanning for string /usr/lib/.../slocate [ OK ] [23:44:35] Scanning for string /usr/lib/.../du [ OK ] [23:44:35] Scanning for string /usr/lib/.../top [ OK ] [23:44:35] Scanning for string /usr/lib/... [ OK ] [23:44:35] Scanning for string /usr/lib/.../bkit-ssh [ OK ] [23:44:36] Scanning for string /usr/lib/.bkit- [ OK ] [23:44:36] Scanning for string /tmp/.bkp [ OK ] [23:44:36] Scanning for string /tmp/.cinik [ OK ] [23:44:36] Scanning for string /tmp/.font-unix/.cinik [ OK ] [23:44:36] Scanning for string /lib/.sso [ OK ] [23:44:36] Scanning for string /lib/.so [ OK ] [23:44:36] Scanning for string /var/run/...dica/clean [ OK ] [23:44:36] Scanning for string /var/run/...dica/xl [ OK ] [23:44:36] Scanning for string /var/run/...dica/xdr [ OK ] [23:44:37] Scanning for string /var/run/...dica/psg [ OK ] [23:44:37] Scanning for string /var/run/...dica/secure [ OK ] [23:44:37] Scanning for string /var/run/...dica/rdx [ OK ] [23:44:37] Scanning for string /var/run/...dica/va [ OK ] [23:44:37] Scanning for string /var/run/...dica/cl.sh [ OK ] [23:44:37] Scanning for string /usr/bin/.etc [ OK ] [23:44:37] Scanning for string /usr/lib/.fx/sched_host.2 [ OK ] [23:44:37] Scanning for string /usr/lib/.fx/random_d.2 [ OK ] [23:44:38] Scanning for string /usr/lib/.fx/set_pid.2 [ OK ] [23:44:38] Scanning for string /usr/lib/.fx/cons.saver [ OK ] [23:44:38] Scanning for string /usr/lib/.fx/adore/adore/adore.ko [ OK ] [23:44:38] Scanning for string /bin/sysback [ OK ] [23:44:38] Scanning for string /usr/local/bin/sysback [ OK ] [23:44:38] Scanning for string /usr/lib/.tbd [ OK ] [23:44:38] Scanning for string /dev/.lib/lib/lib/t0rns [ OK ] [23:44:38] Scanning for string /dev/.lib/lib/lib/du [ OK ] [23:44:38] Scanning for string /dev/.lib/lib/lib/ls [ OK ] [23:44:39] Scanning for string /dev/.lib/lib/lib/t0rnsb [ OK ] [23:44:39] Scanning for string /dev/.lib/lib/lib/ps [ OK ] [23:44:39] Scanning for string /dev/.lib/lib/lib/t0rnp [ OK ] [23:44:39] Scanning for string /dev/.lib/lib/lib/find [ OK ] [23:44:39] Scanning for string /dev/.lib/lib/lib/ifconfig [ OK ] [23:44:39] Scanning for string /dev/.lib/lib/lib/pg [ OK ] [23:44:39] Scanning for string /dev/.lib/lib/lib/ssh.tgz [ OK ] [23:44:39] Scanning for string /dev/.lib/lib/lib/top [ OK ] [23:44:39] Scanning for string /dev/.lib/lib/lib/sz [ OK ] [23:44:40] Scanning for string /dev/.lib/lib/lib/login [ OK ] [23:44:40] Scanning for string /dev/.lib/lib/lib/in.fingerd [ OK ] [23:44:40] Scanning for string /dev/.lib/lib/lib/1i0n.sh [ OK ] [23:44:40] Scanning for string /dev/.lib/lib/lib/pstree [ OK ] [23:44:40] Scanning for string /dev/.lib/lib/lib/in.telnetd [ OK ] [23:44:40] Scanning for string /dev/.lib/lib/lib/mjy [ OK ] [23:44:40] Scanning for string /dev/.lib/lib/lib/sush [ OK ] [23:44:40] Scanning for string /dev/.lib/lib/lib/tfn [ OK ] [23:44:40] Scanning for string /dev/.lib/lib/lib/name [ OK ] [23:44:41] Scanning for string /dev/.lib/lib/lib/getip.sh [ OK ] [23:44:41] Scanning for string /usr/info/.torn/sh* [ OK ] [23:44:41] Scanning for string /usr/src/.puta/.1addr [ OK ] [23:44:41] Scanning for string /usr/src/.puta/.1file [ OK ] [23:44:41] Scanning for string /usr/src/.puta/.1proc [ OK ] [23:44:41] Scanning for string /usr/src/.puta/.1logz [ OK ] [23:44:41] Scanning for string /usr/info/.t0rn [ OK ] [23:44:41] Scanning for string /dev/.lib [ OK ] [23:44:41] Scanning for string /dev/.lib/lib [ OK ] [23:44:42] Scanning for string /dev/.lib/lib/lib [ OK ] [23:44:42] Scanning for string /dev/.lib/lib/lib/dev [ OK ] [23:44:42] Scanning for string /dev/.lib/lib/scan [ OK ] [23:44:42] Scanning for string /usr/src/.puta [ OK ] [23:44:42] Scanning for string /usr/man/man1/man1 [ OK ] [23:44:42] Scanning for string /usr/man/man1/man1/lib [ OK ] [23:44:42] Scanning for string /usr/man/man1/man1/lib/.lib [ OK ] [23:44:42] Scanning for string /usr/man/man1/man1/lib/.lib/.backup [ OK ] [23:44:42] [23:44:42] Performing 'shared libraries' checks [23:44:42] Info: Starting test name 'shared_libs' [23:44:43] Checking for preloading variables [ None found ] [23:44:43] Checking for preload file [ Not found ] [23:44:43] Info: Starting test name 'shared_libs_path' [23:44:43] Checking LD_LIBRARY_PATH variable [ Not found ] [23:44:43] [23:44:43] Performing file properties checks [23:44:43] Info: Starting test name 'properties' [23:44:43] Checking for prerequisites [ OK ] [23:44:43] /bin/bash [ OK ] [23:44:43] /bin/cat [ OK ] [23:44:44] /bin/chmod [ OK ] [23:44:44] /bin/chown [ OK ] [23:44:44] /bin/cp [ OK ] [23:44:44] /bin/date [ OK ] [23:44:44] /bin/df [ OK ] [23:44:45] /bin/dmesg [ OK ] [23:44:45] /bin/echo [ OK ] [23:44:45] /bin/ed [ OK ] [23:44:45] /bin/egrep [ OK ] [23:44:45] Info: Found file '/bin/egrep': it is whitelisted for the 'script replacement' check. [23:44:45] /bin/fgrep [ OK ] [23:44:46] Info: Found file '/bin/fgrep': it is whitelisted for the 'script replacement' check. [23:44:46] /bin/grep [ OK ] [23:44:46] /bin/ip [ OK ] [23:44:46] /bin/kill [ OK ] [23:44:46] /bin/login [ Warning ] [23:44:47] Warning: The file properties have changed: [23:44:47] File: /bin/login [23:44:47] Current hash: a52167a277eaf32e6743e1cb1227652543826b4f [23:44:47] Stored hash : 0ba3a17f19a617036f9aa21d064109f1834eb46f [23:44:47] Current inode: 2039855 Stored inode: 2039863 [23:44:47] Current file modification time: 1228727646 [23:44:47] Stored file modification time : 1207184931 [23:44:47] /bin/ls [ OK ] [23:44:47] /bin/lsmod [ Warning ] [23:44:47] Warning: The file properties have changed: [23:44:47] File: /bin/lsmod [23:44:47] Current hash: be5bd1d2d0e00b4f999cacaa0e47a75db7431976 [23:44:47] Stored hash : 56f23aee856a79d9bfe663303945cf700323951b [23:44:47] Current inode: 606214 Stored inode: 2039865 [23:44:47] Current size: 3952 Stored size: 4344 [23:44:47] Current file modification time: 1223297493 [23:44:48] Stored file modification time : 1203974432 [23:44:48] /bin/mktemp [ OK ] [23:44:48] /bin/more [ OK ] [23:44:48] /bin/mount [ OK ] [23:44:48] /bin/mv [ OK ] [23:44:49] /bin/netstat [ OK ] [23:44:49] /bin/ps [ OK ] [23:44:49] /bin/pwd [ OK ] [23:44:49] /bin/readlink [ OK ] [23:44:50] /bin/sed [ OK ] [23:44:50] /bin/sh [ OK ] [23:44:50] /bin/su [ Warning ] [23:44:50] Warning: The file properties have changed: [23:44:50] File: /bin/su [23:44:50] Current hash: b117a530960f3c0799d45f0927d77b0ab2b2565c [23:44:50] Stored hash : b43226dc595ed6a1ae327c99bc654c57818a39f3 [23:44:50] Current inode: 2039859 Stored inode: 2039913 [23:44:50] Current file modification time: 1228727646 [23:44:50] Stored file modification time : 1207184931 [23:44:51] /bin/touch [ OK ] [23:44:51] /bin/uname [ OK ] [23:44:51] /bin/which [ OK ] [23:44:51] Info: Found file '/bin/which': it is whitelisted for the 'script replacement' check. [23:44:51] /bin/dash [ OK ] [23:44:51] /usr/bin/awk [ OK ] [23:44:52] /usr/bin/basename [ OK ] [23:44:52] /usr/bin/chattr [ OK ] [23:44:52] /usr/bin/cut [ OK ] [23:44:52] /usr/bin/diff [ OK ] [23:44:53] /usr/bin/dirname [ OK ] [23:44:53] /usr/bin/dpkg [ OK ] [23:44:53] /usr/bin/dpkg-query [ OK ] [23:44:53] /usr/bin/du [ OK ] [23:44:53] /usr/bin/env [ OK ] [23:44:54] /usr/bin/file [ OK ] [23:44:54] /usr/bin/find [ OK ] [23:44:54] /usr/bin/GET [ OK ] [23:44:54] /usr/bin/groups [ OK ] [23:44:55] Info: Found file '/usr/bin/groups': it is whitelisted for the 'script replacement' check. [23:44:55] /usr/bin/head [ OK ] [23:44:55] /usr/bin/id [ OK ] [23:44:55] /usr/bin/killall [ OK ] [23:44:55] /usr/bin/last [ OK ] [23:44:55] /usr/bin/lastlog [ Warning ] [23:44:55] Warning: The file properties have changed: [23:44:56] File: /usr/bin/lastlog [23:44:56] Current hash: 0e9a4b59fe69fc25f996f9fdf4b528ddaf9ee35a [23:44:56] Stored hash : 0eab32dae60ceaf930444b18c60aaa62ba9f56ab [23:44:56] Current inode: 3648289 Stored inode: 3646019 [23:44:56] Current file modification time: 1228727646 [23:44:56] Stored file modification time : 1207184931 [23:44:56] /usr/bin/ldd [ OK ] [23:44:56] Info: Found file '/usr/bin/ldd': it is whitelisted for the 'script replacement' check. [23:44:56] /usr/bin/less [ OK ] [23:44:56] /usr/bin/locate [ OK ] [23:44:57] /usr/bin/logger [ OK ] [23:44:57] /usr/bin/lsattr [ OK ] [23:44:57] /usr/bin/lsof [ OK ] [23:44:57] /usr/bin/md5sum [ OK ] [23:44:57] /usr/bin/mlocate [ OK ] [23:44:58] /usr/bin/newgrp [ Warning ] [23:44:58] Warning: The file properties have changed: [23:44:58] File: /usr/bin/newgrp [23:44:58] Current hash: b390b42841db450e5d340afba2b0f40ef632bb06 [23:44:58] Stored hash : 6ae609ac7308831c972ff6b1fa9dee52f7c8a407 [23:44:58] Current inode: 3648290 Stored inode: 3646132 [23:44:58] Current file modification time: 1228727646 [23:44:58] Stored file modification time : 1207184931 [23:44:58] /usr/bin/passwd [ Warning ] [23:44:58] Warning: The file properties have changed: [23:44:58] File: /usr/bin/passwd [23:44:58] Current hash: f179728064beb932d3c0f2372a4525d8caffabf1 [23:44:58] Stored hash : 20a8865a6833bc3e1decabc8c52baf392ca880b7 [23:44:59] Current inode: 3648292 Stored inode: 3646194 [23:44:59] Current file modification time: 1228727643 [23:44:59] Stored file modification time : 1207184929 [23:44:59] /usr/bin/perl [ OK ] [23:44:59] /usr/bin/pstree [ OK ] [23:44:59] /usr/bin/rkhunter [ OK ] [23:44:59] /usr/bin/rpm [ Warning ] [23:44:59] Warning: The file '/usr/bin/rpm' exists on the system, but it is not present in the rkhunter.dat file. [23:45:00] /usr/bin/runcon [ OK ] [23:45:00] /usr/bin/sha1sum [ OK ] [23:45:00] /usr/bin/size [ OK ] [23:45:00] /usr/bin/sort [ OK ] [23:45:01] /usr/bin/stat [ OK ] [23:45:01] /usr/bin/strace [ OK ] [23:45:01] /usr/bin/strings [ OK ] [23:45:01] /usr/bin/sudo [ OK ] [23:45:01] /usr/bin/tail [ OK ] [23:45:02] /usr/bin/test [ OK ] [23:45:02] /usr/bin/top [ OK ] [23:45:02] /usr/bin/touch [ OK ] [23:45:02] /usr/bin/tr [ OK ] [23:45:02] /usr/bin/uniq [ OK ] [23:45:03] /usr/bin/users [ OK ] [23:45:03] /usr/bin/vmstat [ OK ] [23:45:03] /usr/bin/w [ OK ] [23:45:03] /usr/bin/watch [ OK ] [23:45:03] /usr/bin/wc [ OK ] [23:45:04] /usr/bin/wget [ OK ] [23:45:04] /usr/bin/whatis [ OK ] [23:45:04] /usr/bin/whereis [ OK ] [23:45:04] /usr/bin/which [ OK ] [23:45:04] /usr/bin/who [ OK ] [23:45:04] /usr/bin/whoami [ OK ] [23:45:05] /usr/bin/mawk [ OK ] [23:45:05] /usr/bin/lwp-request [ OK ] [23:45:05] Info: Found file '/usr/bin/lwp-request': it is whitelisted for the 'script replacement' check. [23:45:05] /usr/bin/w.procps [ OK ] [23:45:05] /sbin/depmod [ Warning ] [23:45:06] Warning: The file properties have changed: [23:45:06] File: /sbin/depmod [23:45:06] Current hash: 203ea97ff492f25e275bfb0d73bae82fa9b834eb [23:45:06] Stored hash : 6ca5c21e2f3a78105f0b9609f85fcd23e2bdc3fb [23:45:06] Current inode: 5840904 Stored inode: 6840342 [23:45:06] Current size: 31448 Stored size: 45216 [23:45:06] Current file modification time: 1223297493 [23:45:06] Stored file modification time : 1203974432 [23:45:06] /sbin/ifconfig [ OK ] [23:45:06] /sbin/ifdown [ OK ] [23:45:07] /sbin/ifup [ OK ] [23:45:07] /sbin/init [ OK ] [23:45:07] /sbin/insmod [ Warning ] [23:45:07] Warning: The file properties have changed: [23:45:07] File: /sbin/insmod [23:45:07] Current hash: d0f772ef77188de05edc0076c350e25474eb2450 [23:45:07] Stored hash : 014396614120829f88a0c82610c13144d8d2c02e [23:45:07] Current inode: 6840369 Stored inode: 6840375 [23:45:07] Current size: 4632 Stored size: 5740 [23:45:07] Current file modification time: 1223297493 [23:45:07] Stored file modification time : 1203974432 [23:45:07] /sbin/ip [ OK ] [23:45:08] /sbin/lsmod [ Warning ] [23:45:08] Warning: The file properties have changed: [23:45:08] File: /sbin/lsmod [23:45:08] Current hash: be5bd1d2d0e00b4f999cacaa0e47a75db7431976 [23:45:08] Stored hash : 56f23aee856a79d9bfe663303945cf700323951b [23:45:08] Current inode: 5840907 Stored inode: 6840410 [23:45:08] Current file modification time: 1226519446 [23:45:08] Stored file modification time : 1211304804 [23:45:08] /sbin/modinfo [ Warning ] [23:45:08] Warning: The file properties have changed: [23:45:08] File: /sbin/modinfo [23:45:08] Current hash: a04124962db6deecf777ddc35f93b02ec60992e6 [23:45:08] Stored hash : 313a170da05a5ee9d10e46967f1f472275b46b53 [23:45:08] Current inode: 5840905 Stored inode: 6840429 [23:45:08] Current size: 8652 Stored size: 10872 [23:45:08] Current file modification time: 1223297493 [23:45:09] Stored file modification time : 1203974432 [23:45:09] /sbin/modprobe [ Warning ] [23:45:09] Warning: The file properties have changed: [23:45:09] File: /sbin/modprobe [23:45:09] Current hash: da098e64bfe6f64850e49eafa7c46220a52564ca [23:45:09] Stored hash : 1fb9823287322bf64584b77d4a91ebf59c74e75a [23:45:09] Current inode: 6840387 Stored inode: 6840430 [23:45:09] Current size: 19876 Stored size: 26860 [23:45:09] Current file modification time: 1223297493 [23:45:09] Stored file modification time : 1203974432 [23:45:09] /sbin/rmmod [ Warning ] [23:45:10] Warning: The file properties have changed: [23:45:10] File: /sbin/rmmod [23:45:10] Current hash: 97de214a061471c80c6ebc9b6cdd0caf77d3467a [23:45:10] Stored hash : 45a718f89bdf296e3f68fd4a1a5debd2305cf040 [23:45:10] Current inode: 5840902 Stored inode: 6840453 [23:45:10] Current size: 6672 Stored size: 7800 [23:45:10] Current file modification time: 1223297493 [23:45:10] Stored file modification time : 1203974432 [23:45:10] /sbin/runlevel [ OK ] [23:45:10] /sbin/sulogin [ OK ] [23:45:11] /sbin/sysctl [ OK ] [23:45:11] /sbin/syslogd [ OK ] [23:45:11] /usr/sbin/adduser [ OK ] [23:45:11] Info: Found file '/usr/sbin/adduser': it is whitelisted for the 'script replacement' check. [23:45:11] /usr/sbin/chroot [ OK ] [23:45:12] /usr/sbin/cron [ OK ] [23:45:12] /usr/sbin/groupadd [ Warning ] [23:45:12] Warning: The file properties have changed: [23:45:12] File: /usr/sbin/groupadd [23:45:12] Current hash: 477b044b080307e7110931d24cb61b5201c17f97 [23:45:12] Stored hash : 8c65b4fa152403c4326235f21378e50a1e683213 [23:45:12] Current inode: 3648296 Stored inode: 3649888 [23:45:12] Current file modification time: 1228727643 [23:45:12] Stored file modification time : 1207184929 [23:45:12] /usr/sbin/groupdel [ Warning ] [23:45:12] Warning: The file properties have changed: [23:45:13] File: /usr/sbin/groupdel [23:45:13] Current hash: 7532594441e37b5f0f29f56c17a0b02f549378fb [23:45:13] Stored hash : 4568ef7a47ec854346693bc9c443e33a5eb3892e [23:45:13] Current inode: 3648297 Stored inode: 3649889 [23:45:13] Current file modification time: 1228727643 [23:45:13] Stored file modification time : 1207184929 [23:45:13] /usr/sbin/groupmod [ Warning ] [23:45:13] Warning: The file properties have changed: [23:45:13] File: /usr/sbin/groupmod [23:45:13] Current hash: e7b597de8c3908cc57f6efa5ce9b64d22de8d7f2 [23:45:13] Stored hash : c71899fb8b33369f9e925605b7ae29a189906434 [23:45:13] Current inode: 3648298 Stored inode: 3649890 [23:45:13] Current file modification time: 1228727643 [23:45:13] Stored file modification time : 1207184929 [23:45:13] /usr/sbin/grpck [ Warning ] [23:45:13] Warning: The file properties have changed: [23:45:14] File: /usr/sbin/grpck [23:45:14] Current hash: 2306ec310243a6373bbfae4b5766249eb447531e [23:45:14] Stored hash : 073f3ab3b22dfda04504d181860fd2e66edc12fe [23:45:14] Current inode: 3648299 Stored inode: 3649891 [23:45:14] Current file modification time: 1228727643 [23:45:14] Stored file modification time : 1207184929 [23:45:14] /usr/sbin/nologin [ Warning ] [23:45:14] Warning: The file properties have changed: [23:45:14] File: /usr/sbin/nologin [23:45:14] Current hash: 9bbf3d62e73e273205566d9c0adacb8f99ee7e16 [23:45:14] Stored hash : d9d18f4d6e8b40d57862f9382358a4d20fcf6a55 [23:45:14] Current inode: 3648287 Stored inode: 3649942 [23:45:14] Current file modification time: 1228727646 [23:45:14] Stored file modification time : 1207184931 [23:45:15] /usr/sbin/pwck [ Warning ] [23:45:15] Warning: The file properties have changed: [23:45:15] File: /usr/sbin/pwck [23:45:15] Current hash: b66902bf63f58296ed1552c0a984b7108b226b5a [23:45:15] Stored hash : d11a05836045f59670841b6531e553a935ba0235 [23:45:15] Current inode: 3648305 Stored inode: 3649967 [23:45:15] Current file modification time: 1228727643 [23:45:15] Stored file modification time : 1207184929 [23:45:15] /usr/sbin/tcpd [ OK ] [23:45:16] /usr/sbin/useradd [ Warning ] [23:45:16] Warning: The file properties have changed: [23:45:16] File: /usr/sbin/useradd [23:45:16] Current hash: 6d75aebe0444c6a0e39793d2e0323bcc2027273a [23:45:16] Stored hash : e0e00bf0bd68661db64972c54d62809080728130 [23:45:16] Current inode: 3648310 Stored inode: 3650030 [23:45:16] Current file modification time: 1228727643 [23:45:16] Stored file modification time : 1207184929 [23:45:16] /usr/sbin/userdel [ Warning ] [23:45:16] Warning: The file properties have changed: [23:45:16] File: /usr/sbin/userdel [23:45:16] Current hash: 08d1f0c6659c24764a8642e698850a74ac5cb217 [23:45:16] Stored hash : c15911f163493ad4de89372ca6b5d934b0f18bd8 [23:45:16] Current inode: 3648311 Stored inode: 3650031 [23:45:16] Current file modification time: 1228727643 [23:45:16] Stored file modification time : 1207184929 [23:45:17] /usr/sbin/usermod [ Warning ] [23:45:17] Warning: The file properties have changed: [23:45:17] File: /usr/sbin/usermod [23:45:17] Current hash: f18815f79dd59839fbf96e2d31a9609c70e6742e [23:45:17] Stored hash : b4fe25be3974694088a89124c0a857082930efbf [23:45:17] Current inode: 3648312 Stored inode: 3650032 [23:45:17] Current file modification time: 1228727643 [23:45:17] Stored file modification time : 1207184929 [23:45:17] /usr/sbin/vipw [ Warning ] [23:45:17] Warning: The file properties have changed: [23:45:17] File: /usr/sbin/vipw [23:45:17] Current hash: 3a4a33ff1ea9a1c941c7ffdf6e0f2981d5cb1e2e [23:45:17] Stored hash : 274d9bc4478c4972f8676ab4f9cd7d7a60369349 [23:45:17] Current inode: 3648313 Stored inode: 3650039 [23:45:17] Current file modification time: 1228727643 [23:45:17] Stored file modification time : 1207184929 [23:45:25] [23:45:25] Checking for rootkits... [23:45:25] Info: Starting test name 'rootkits' [23:45:25] [23:45:25] Performing check of known rootkit files and directories [23:45:25] Info: Starting test name 'known_rkts' [23:45:25] [23:45:25] Checking for 55808 Trojan - Variant A... [23:45:25] Checking for file '/tmp/.../r' [ Not found ] [23:45:25] Checking for file '/tmp/.../a' [ Not found ] [23:45:25] 55808 Trojan - Variant A [ Not found ] [23:45:25] [23:45:25] Checking for ADM Worm... [23:45:25] Checking for string 'w0rm' [ Not found ] [23:45:25] ADM Worm [ Not found ] [23:45:25] [23:45:25] Checking for AjaKit Rootkit... [23:45:25] Checking for file '/dev/tux/.addr' [ Not found ] [23:45:25] Checking for file '/dev/tux/.proc' [ Not found ] [23:45:26] Checking for file '/dev/tux/.file' [ Not found ] [23:45:26] Checking for file '/lib/.libgh-gh/cleaner' [ Not found ] [23:45:26] Checking for file '/lib/.libgh-gh/Patch/patch' [ Not found ] [23:45:26] Checking for file '/lib/.libgh-gh/sb0k' [ Not found ] [23:45:26] Checking for directory '/dev/tux' [ Not found ] [23:45:26] Checking for directory '/lib/.libgh-gh' [ Not found ] [23:45:26] AjaKit Rootkit [ Not found ] [23:45:26] [23:45:26] Checking for aPa Kit... [23:45:26] Checking for file '/usr/share/.aPa' [ Not found ] [23:45:26] aPa Kit [ Not found ] [23:45:26] [23:45:26] Checking for Apache Worm... [23:45:26] Checking for file '/bin/.log' [ Not found ] [23:45:26] Apache Worm [ Not found ] [23:45:26] [23:45:26] Checking for Ambient (ark) Rootkit... [23:45:26] Checking for file '/usr/lib/.ark?' [ Not found ] [23:45:26] Checking for file '/dev/ptyxx/.log' [ Not found ] [23:45:26] Checking for file '/dev/ptyxx/.file' [ Not found ] [23:45:26] Checking for directory '/dev/ptyxx' [ Not found ] [23:45:27] Ambient (ark) Rootkit [ Not found ] [23:45:27] [23:45:27] Checking for Balaur Rootkit... [23:45:27] Checking for file '/usr/lib/liblog.o' [ Not found ] [23:45:27] Checking for directory '/usr/lib/.kinetic' [ Not found ] [23:45:27] Checking for directory '/usr/lib/.egcs' [ Not found ] [23:45:27] Checking for directory '/usr/lib/.wormie' [ Not found ] [23:45:27] Balaur Rootkit [ Not found ] [23:45:27] [23:45:27] Checking for BeastKit Rootkit... [23:45:27] Checking for file '/usr/sbin/arobia' [ Not found ] [23:45:27] Checking for file '/usr/sbin/idrun' [ Not found ] [23:45:27] Checking for file '/usr/lib/elm/arobia/elm' [ Not found ] [23:45:27] Checking for file '/usr/lib/elm/arobia/elm/hk' [ Not found ] [23:45:27] Checking for file '/usr/lib/elm/arobia/elm/hk.pub' [ Not found ] [23:45:27] Checking for file '/usr/lib/elm/arobia/elm/sc' [ Not found ] [23:45:27] Checking for file '/usr/lib/elm/arobia/elm/sd.pp' [ Not found ] [23:45:27] Checking for file '/usr/lib/elm/arobia/elm/sdco' [ Not found ] [23:45:27] Checking for file '/usr/lib/elm/arobia/elm/srsd' [ Not found ] [23:45:28] Checking for directory '/lib/ldd.so/bktools' [ Not found ] [23:45:28] BeastKit Rootkit [ Not found ] [23:45:28] [23:45:28] Checking for beX2 Rootkit... [23:45:28] Checking for directory '/usr/include/bex' [ Not found ] [23:45:28] beX2 Rootkit [ Not found ] [23:45:28] [23:45:28] Checking for BOBKit Rootkit... [23:45:28] Checking for file '/usr/sbin/ntpsx' [ Not found ] [23:45:28] Checking for file '/usr/lib/.../ls' [ Not found ] [23:45:28] Checking for file '/usr/lib/.../netstat' [ Not found ] [23:45:28] Checking for file '/usr/lib/.../lsof' [ Not found ] [23:45:28] Checking for file '/usr/lib/.../bkit-ssh/bkit-shdcfg' [ Not found ] [23:45:28] Checking for file '/usr/lib/.../bkit-ssh/bkit-shhk' [ Not found ] [23:45:28] Checking for file '/usr/lib/.../bkit-ssh/bkit-pw' [ Not found ] [23:45:28] Checking for file '/usr/lib/.../bkit-ssh/bkit-shrs' [ Not found ] [23:45:28] Checking for file '/usr/lib/.../uconf.inv' [ Not found ] [23:45:28] Checking for file '/usr/lib/.../psr' [ Not found ] [23:45:29] Checking for file '/usr/lib/.../find' [ Not found ] [23:45:29] Checking for file '/usr/lib/.../pstree' [ Not found ] [23:45:29] Checking for file '/usr/lib/.../slocate' [ Not found ] [23:45:29] Checking for file '/usr/lib/.../du' [ Not found ] [23:45:29] Checking for file '/usr/lib/.../top' [ Not found ] [23:45:29] Checking for directory '/usr/lib/...' [ Not found ] [23:45:29] Checking for directory '/usr/lib/.../bkit-ssh' [ Not found ] [23:45:29] Checking for directory '/usr/lib/.bkit-' [ Not found ] [23:45:29] Checking for directory '/tmp/.bkp' [ Not found ] [23:45:29] BOBKit Rootkit [ Not found ] [23:45:29] [23:45:29] Checking for CiNIK Worm (Slapper.B variant)... [23:45:29] Checking for file '/tmp/.cinik' [ Not found ] [23:45:29] Checking for directory '/tmp/.font-unix/.cinik' [ Not found ] [23:45:29] CiNIK Worm (Slapper.B variant) [ Not found ] [23:45:29] [23:45:29] Checking for Danny-Boy's Abuse Kit... [23:45:29] Checking for file '/dev/mdev' [ Not found ] [23:45:29] Checking for file '/usr/lib/libX.a' [ Not found ] [23:45:29] Danny-Boy's Abuse Kit [ Not found ] [23:45:30] [23:45:30] Checking for Devil RootKit... [23:45:30] Checking for file '/var/lib/games/.src' [ Not found ] [23:45:30] Checking for file '/dev/dsx' [ Not found ] [23:45:30] Checking for file '/dev/caca' [ Not found ] [23:45:30] Devil RootKit [ Not found ] [23:45:30] [23:45:30] Checking for Dica-Kit Rootkit... [23:45:30] Checking for file '/lib/.sso' [ Not found ] [23:45:30] Checking for file '/lib/.so' [ Not found ] [23:45:30] Checking for file '/var/run/...dica/clean' [ Not found ] [23:45:30] Checking for file '/var/run/...dica/xl' [ Not found ] [23:45:30] Checking for file '/var/run/...dica/xdr' [ Not found ] [23:45:30] Checking for file '/var/run/...dica/psg' [ Not found ] [23:45:30] Checking for file '/var/run/...dica/secure' [ Not found ] [23:45:30] Checking for file '/var/run/...dica/rdx' [ Not found ] [23:45:30] Checking for file '/var/run/...dica/va' [ Not found ] [23:45:30] Checking for file '/var/run/...dica/cl.sh' [ Not found ] [23:45:30] Checking for file '/usr/bin/.etc' [ Not found ] [23:45:30] Checking for directory '/var/run/...dica' [ Not found ] [23:45:31] Checking for directory '/var/run/...dica/mh' [ Not found ] [23:45:31] Checking for directory '/var/run/...dica/scan' [ Not found ] [23:45:31] Dica-Kit Rootkit [ Not found ] [23:45:31] [23:45:31] Checking for Dreams Rootkit... [23:45:31] Checking for file '/dev/ttyoa' [ Not found ] [23:45:31] Checking for file '/dev/ttyof' [ Not found ] [23:45:31] Checking for file '/dev/ttyop' [ Not found ] [23:45:31] Checking for file '/usr/bin/sense' [ Not found ] [23:45:31] Checking for file '/usr/bin/sl2' [ Not found ] [23:45:31] Checking for file '/usr/bin/logclear' [ Not found ] [23:45:31] Checking for file '/usr/bin/(swapd)' [ Not found ] [23:45:31] Checking for file '/usr/bin/snfs' [ Not found ] [23:45:31] Checking for file '/usr/lib/libsss' [ Not found ] [23:45:31] Checking for directory '/dev/ida/.hpd' [ Not found ] [23:45:31] Dreams Rootkit [ Not found ] [23:45:31] [23:45:31] Checking for Duarawkz Rootkit... [23:45:31] Checking for file '/usr/bin/duarawkz/loginpass' [ Not found ] [23:45:32] Checking for directory '/usr/bin/duarawkz' [ Not found ] [23:45:32] Duarawkz Rootkit [ Not found ] [23:45:32] [23:45:32] Checking for Enye LKM... [23:45:32] Checking for file '/etc/.enyelkmHIDE^IT.ko' [ Not found ] [23:45:32] Enye LKM [ Not found ] [23:45:32] [23:45:32] Checking for Flea Linux Rootkit... [23:45:32] Checking for file '/etc/ld.so.hash' [ Not found ] [23:45:32] Checking for file '/lib/security/.config/ssh/ssh_host_key' [ Not found ] [23:45:32] Checking for file '/lib/security/.config/ssh/ssh_host_key.pub' [ Not found ] [23:45:32] Checking for file '/lib/security/.config/ssh/ssh_random_seed' [ Not found ] [23:45:32] Checking for file '/usr/bin/ssh2d' [ Not found ] [23:45:32] Checking for file '/usr/lib/ldlibns.so' [ Not found ] [23:45:32] Checking for file '/usr/lib/ldlibpst.so' [ Not found ] [23:45:32] Checking for file '/usr/lib/ldlibdu.so' [ Not found ] [23:45:32] Checking for file '/usr/lib/ldlibct.so' [ Not found ] [23:45:32] Checking for directory '/lib/security/.config/ssh' [ Not found ] [23:45:32] Checking for directory '/dev/..0' [ Not found ] [23:45:32] Checking for directory '/dev/..0/backup' [ Not found ] [23:45:33] Flea Linux Rootkit [ Not found ] [23:45:33] [23:45:33] Checking for FreeBSD Rootkit... [23:45:33] Checking for file '/usr/lib/.fx/sched_host.2' [ Not found ] [23:45:33] Checking for file '/usr/lib/.fx/random_d.2' [ Not found ] [23:45:33] Checking for file '/usr/lib/.fx/set_pid.2' [ Not found ] [23:45:33] Checking for file '/usr/lib/.fx/cons.saver' [ Not found ] [23:45:33] Checking for file '/usr/lib/.fx/adore/adore/adore.ko' [ Not found ] [23:45:33] Checking for file '/bin/sysback' [ Not found ] [23:45:33] Checking for file '/usr/local/bin/sysback' [ Not found ] [23:45:33] Checking for directory '/usr/lib/.fx' [ Not found ] [23:45:33] Checking for directory '/usr/lib/.fx/adore' [ Not found ] [23:45:33] FreeBSD Rootkit [ Not found ] [23:45:33] [23:45:33] Checking for f***`it Rootkit... [23:45:33] Checking for file '/dev/proc/fuckit/hax0r' [ Not found ] [23:45:33] Checking for file '/dev/proc/fuckit/hax0rshell' [ Not found ] [23:45:33] Checking for file '/dev/proc/fuckit/config/lports' [ Not found ] [23:45:33] Checking for file '/dev/proc/fuckit/config/rports' [ Not found ] [23:45:33] Checking for file '/dev/proc/fuckit/config/rkconf' [ Not found ] [23:45:34] Checking for file '/dev/proc/fuckit/config/password' [ Not found ] [23:45:34] Checking for file '/dev/proc/fuckit/config/progs' [ Not found ] [23:45:34] Checking for file '/dev/proc/system-bins/init' [ Not found ] [23:45:34] f***`it Rootkit [ Not found ] [23:45:34] [23:45:34] Checking for GasKit Rootkit... [23:45:34] Checking for file '/dev/dev/gaskit/sshd/sshdd' [ Not found ] [23:45:34] Checking for directory '/dev/dev' [ Not found ] [23:45:34] Checking for directory '/dev/dev/gaskit' [ Not found ] [23:45:34] Checking for directory '/dev/dev/gaskit/sshd' [ Not found ] [23:45:34] GasKit Rootkit [ Not found ] [23:45:34] [23:45:34] Checking for Heroin LKM... [23:45:34] Checking for kernel symbol 'heroin' [ Not found ] [23:45:34] Heroin LKM [ Not found ] [23:45:34] [23:45:34] Checking for HjC Kit... [23:45:34] Checking for directory '/dev/.hijackerz' [ Not found ] [23:45:34] HjC Kit [ Not found ] [23:45:34] [23:45:34] Checking for ignoKit Rootkit... [23:45:35] Checking for file '/lib/defs/p' [ Not found ] [23:45:35] Checking for file '/lib/defs/q' [ Not found ] [23:45:35] Checking for file '/lib/defs/r' [ Not found ] [23:45:35] Checking for file '/lib/defs/s' [ Not found ] [23:45:35] Checking for file '/lib/defs/t' [ Not found ] [23:45:35] Checking for file '/usr/lib/defs/p' [ Not found ] [23:45:35] Checking for file '/usr/lib/defs/q' [ Not found ] [23:45:35] Checking for file '/usr/lib/defs/r' [ Not found ] [23:45:35] Checking for file '/usr/lib/defs/s' [ Not found ] [23:45:35] Checking for file '/usr/lib/defs/t' [ Not found ] [23:45:35] Checking for file '/usr/lib/.libigno/pkunsec' [ Not found ] [23:45:35] Checking for file '/usr/lib/.libigno/.igno/psybnc/psybnc' [ Not found ] [23:45:35] Checking for directory '/usr/lib/.libigno' [ Not found ] [23:45:35] Checking for directory '/usr/lib/.libigno/.igno' [ Not found ] [23:45:35] ignoKit Rootkit [ Not found ] [23:45:35] [23:45:35] Checking for ImperalsS-FBRK Rootkit... [23:45:35] Checking for directory '/dev/fd/.88' [ Not found ] [23:45:36] Checking for directory '/dev/fd/.99' [ Not found ] [23:45:36] ImperalsS-FBRK Rootkit [ Not found ] [23:45:36] [23:45:36] Checking for Irix Rootkit... [23:45:36] Checking for directory '/dev/pts/01' [ Not found ] [23:45:36] Checking for directory '/dev/pts/01/backup' [ Not found ] [23:45:36] Checking for directory '/dev/pts/01/etc' [ Not found ] [23:45:36] Checking for directory '/dev/pts/01/tmp' [ Not found ] [23:45:36] Irix Rootkit [ Not found ] [23:45:36] [23:45:36] Checking for Kitko Rootkit... [23:45:36] Checking for directory '/usr/src/redhat/SRPMS/...' [ Not found ] [23:45:36] Kitko Rootkit [ Not found ] [23:45:36] [23:45:36] Checking for Knark Rootkit... [23:45:36] Checking for file '/proc/knark/pids' [ Not found ] [23:45:36] Checking for directory '/proc/knark' [ Not found ] [23:45:36] Knark Rootkit [ Not found ] [23:45:36] [23:45:36] Checking for Li0n Worm... [23:45:36] Checking for file '/bin/in.telnetd' [ Not found ] [23:45:37] Checking for file '/bin/mjy' [ Not found ] [23:45:37] Checking for file '/usr/man/man1/man1/lib/.lib/mjy' [ Not found ] [23:45:37] Checking for file '/usr/man/man1/man1/lib/.lib/in.telnetd' [ Not found ] [23:45:37] Checking for file '/usr/man/man1/man1/lib/.lib/.x' [ Not found ] [23:45:37] Checking for file '/dev/.lib/lib/scan/1i0n.sh' [ Not found ] [23:45:37] Checking for file '/dev/.lib/lib/scan/hack.sh' [ Not found ] [23:45:37] Checking for file '/dev/.lib/lib/scan/bind' [ Not found ] [23:45:37] Checking for file '/dev/.lib/lib/scan/randb' [ Not found ] [23:45:37] Checking for file '/dev/.lib/lib/scan/scan.sh' [ Not found ] [23:45:37] Checking for file '/dev/.lib/lib/scan/pscan' [ Not found ] [23:45:37] Checking for file '/dev/.lib/lib/scan/star.sh' [ Not found ] [23:45:37] Checking for file '/dev/.lib/lib/scan/bindx.sh' [ Not found ] [23:45:37] Checking for file '/dev/.lib/lib/scan/bindname.log' [ Not found ] [23:45:37] Checking for file '/dev/.lib/lib/1i0n.sh' [ Not found ] [23:45:38] Checking for file '/dev/.lib/lib/lib/netstat' [ Not found ] [23:45:38] Checking for file '/dev/.lib/lib/lib/dev/.1addr' [ Not found ] [23:45:38] Checking for file '/dev/.lib/lib/lib/dev/.1logz' [ Not found ] [23:45:38] Checking for file '/dev/.lib/lib/lib/dev/.1proc' [ Not found ] [23:45:38] Checking for file '/dev/.lib/lib/lib/dev/.1file' [ Not found ] [23:45:38] Li0n Worm [ Not found ] [23:45:38] [23:45:38] Checking for Lockit / LJK2 Rootkit... [23:45:38] Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_config' [ Not found ] [23:45:38] Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_host_key' [ Not found ] [23:45:38] Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_host_key.pub' [ Not found ] [23:45:38] Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_random_seed*' [ Not found ] [23:45:38] Checking for file '/usr/lib/libmen.oo/.LJK2/sshd_config' [ Not found ] [23:45:38] Checking for file '/usr/lib/libmen.oo/.LJK2/backdoor/RK1bd' [ Not found ] [23:45:38] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/du' [ Not found ] [23:45:38] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ifconfig' [ Not found ] [23:45:38] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/inetd.conf' [ Not found ] [23:45:39] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/locate' [ Not found ] [23:45:39] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/login' [ Not found ] [23:45:39] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ls' [ Not found ] [23:45:39] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/netstat' [ Not found ] [23:45:39] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ps' [ Not found ] [23:45:39] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/pstree' [ Not found ] [23:45:39] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/rc.sysinit' [ Not found ] [23:45:39] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/syslogd' [ Not found ] [23:45:39] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/tcpd' [ Not found ] [23:45:39] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/top' [ Not found ] [23:45:39] Checking for file '/usr/lib/libmen.oo/.LJK2/clean/RK1sauber' [ Not found ] [23:45:39] Checking for file '/usr/lib/libmen.oo/.LJK2/clean/RK1wted' [ Not found ] [23:45:39] Checking for file '/usr/lib/libmen.oo/.LJK2/hack/RK1parser' [ Not found ] [23:45:39] Checking for file '/usr/lib/libmen.oo/.LJK2/hack/RK1sniff' [ Not found ] [23:45:39] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1addr' [ Not found ] [23:45:39] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1dir' [ Not found ] [23:45:40] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1log' [ Not found ] [23:45:40] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1proc' [ Not found ] [23:45:40] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/RK1phidemod.c' [ Not found ] [23:45:40] Checking for file '/usr/lib/libmen.oo/.LJK2/modules/README.modules' [ Not found ] [23:45:40] Checking for file '/usr/lib/libmen.oo/.LJK2/modules/RK1hidem.c' [ Not found ] [23:45:40] Checking for file '/usr/lib/libmen.oo/.LJK2/modules/RK1phide' [ Not found ] [23:45:40] Checking for file '/usr/lib/libmen.oo/.LJK2/sshconfig/RK1ssh' [ Not found ] [23:45:40] Checking for directory '/usr/lib/libmen.oo/.LJK2' [ Not found ] [23:45:40] Lockit / LJK2 Rootkit [ Not found ] [23:45:40] [23:45:40] Checking for Mood-NT Rootkit... [23:45:40] Checking for file '/sbin/init__mood-nt-_-_cthulhu' [ Not found ] [23:45:40] Checking for file '/_cthulhu/mood-nt.init' [ Not found ] [23:45:40] Checking for file '/_cthulhu/mood-nt.conf' [ Not found ] [23:45:40] Checking for file '/_cthulhu/mood-nt.sniff' [ Not found ] [23:45:40] Checking for directory '/_cthulhu' [ Not found ] [23:45:40] Mood-NT Rootkit [ Not found ] [23:45:41] [23:45:41] Checking for MRK Rootkit... [23:45:41] Checking for file '/dev/ida/.inet/pid' [ Not found ] [23:45:41] Checking for file '/dev/ida/.inet/ssh_host_key' [ Not found ] [23:45:41] Checking for file '/dev/ida/.inet/ssh_random_seed' [ Not found ] [23:45:41] Checking for file '/dev/ida/.inet/tcp.log' [ Not found ] [23:45:41] Checking for directory '/dev/ida/.inet' [ Not found ] [23:45:41] Checking for directory '/var/spool/cron/.sh' [ Not found ] [23:45:41] MRK Rootkit [ Not found ] [23:45:41] [23:45:41] Checking for Ni0 Rootkit... [23:45:41] Checking for file '/var/lock/subsys/...datafile.../...net...' [ Not found ] [23:45:41] Checking for file '/var/lock/subsys/...datafile.../...port...' [ Not found ] [23:45:41] Checking for file '/var/lock/subsys/...datafile.../...ps...' [ Not found ] [23:45:41] Checking for file '/var/lock/subsys/...datafile.../...file...' [ Not found ] [23:45:41] Checking for directory '/tmp/waza' [ Not found ] [23:45:41] Checking for directory '/var/lock/subsys/...datafile...' [ Not found ] [23:45:41] Checking for directory '/usr/sbin/es' [ Not found ] [23:45:41] Ni0 Rootkit [ Not found ] [23:45:42] [23:45:42] Checking for Ohhara Rootkit... [23:45:42] Checking for file '/var/lock/subsys/...datafile.../...datafile.../in.smbd.log' [ Not found ] [23:45:42] Checking for directory '/var/lock/subsys/...datafile...' [ Not found ] [23:45:42] Checking for directory '/var/lock/subsys/...datafile.../...datafile...' [ Not found ] [23:45:42] Checking for directory '/var/lock/subsys/...datafile.../...datafile.../bin' [ Not found ] [23:45:42] Checking for directory '/var/lock/subsys/...datafile.../...datafile.../usr/bin' [ Not found ] [23:45:42] Checking for directory '/var/lock/subsys/...datafile.../...datafile.../usr/sbin' [ Not found ] [23:45:42] Checking for directory '/var/lock/subsys/...datafile.../...datafile.../lib/security' [ Not found ] [23:45:42] Ohhara Rootkit [ Not found ] [23:45:42] [23:45:42] Checking for Optic Kit (Tux) Worm... [23:45:42] Checking for directory '/dev/tux' [ Not found ] [23:45:42] Checking for directory '/usr/bin/xchk' [ Not found ] [23:45:42] Checking for directory '/usr/bin/xsf' [ Not found ] [23:45:42] Checking for directory '/usr/bin/ssh2d' [ Not found ] [23:45:42] Optic Kit (Tux) Worm [ Not found ] [23:45:42] [23:45:42] Checking for Oz Rootkit... [23:45:42] Checking for file '/dev/.oz/.nap/rkit/terror' [ Not found ] [23:45:42] Checking for directory '/dev/.oz' [ Not found ] [23:45:43] Oz Rootkit [ Not found ] [23:45:43] [23:45:43] Checking for Phalanx Rootkit... [23:45:43] Checking for file '/usr/share/.home.ph1/cb' [ Not found ] [23:45:43] Checking for file '/etc/host.ph1' [ Not found ] [23:45:43] Checking for file '/bin/host.ph1' [ Not found ] [23:45:43] Checking for file '/usr/share/.home.ph1/phalanx' [ Not found ] [23:45:43] Checking for directory '/usr/share/.home.ph1' [ Not found ] [23:45:43] Phalanx Rootkit [ Not found ] [23:45:43] [23:45:43] Checking for Phalanx Rootkit (strings)... [23:45:43] Checking for string 'phalanx' [ Not found ] [23:45:43] Phalanx Rootkit (strings) [ Not found ] [23:45:43] [23:45:43] Checking for Portacelo Rootkit... [23:45:43] Checking for file '/var/lib/.../.ak' [ Not found ] [23:45:43] Checking for file '/var/lib/.../.hk' [ Not found ] [23:45:43] Checking for file '/var/lib/.../.rs' [ Not found ] [23:45:43] Checking for file '/var/lib/.../.p' [ Not found ] [23:45:43] Checking for file '/var/lib/.../getty' [ Not found ] [23:45:44] Checking for file '/var/lib/.../lkt.o' [ Not found ] [23:45:44] Checking for file '/var/lib/.../show' [ Not found ] [23:45:44] Checking for file '/var/lib/.../nlkt.o' [ Not found ] [23:45:44] Checking for file '/var/lib/.../ssshrc' [ Not found ] [23:45:44] Checking for file '/var/lib/.../sssh_equiv' [ Not found ] [23:45:44] Checking for file '/var/lib/.../sssh_known_hosts' [ Not found ] [23:45:44] Checking for file '/var/lib/.../sssh_pid' [ Not found ] [23:45:44] Checking for file '~/.sssh/known_hosts' [ Not found ] [23:45:44] Portacelo Rootkit [ Not found ] [23:45:44] [23:45:44] Checking for R3dstorm Toolkit... [23:45:44] Checking for file '/var/log/tk02/see_all' [ Not found ] [23:45:44] Checking for file '/bin/.../sshd/sbin/sshd1' [ Not found ] [23:45:44] Checking for file '/bin/.../hate/sk' [ Not found ] [23:45:44] Checking for file '/bin/.../see_all' [ Not found ] [23:45:44] Checking for directory '/var/log/tk02' [ Not found ] [23:45:44] Checking for directory '/var/log/tk02/old' [ Not found ] [23:45:44] Checking for directory '/bin/...' [ Not found ] [23:45:45] R3dstorm Toolkit [ Not found ] [23:45:45] [23:45:45] Checking for RH-Sharpe's Rootkit... [23:45:45] Checking for file '/bin/lps' [ Not found ] [23:45:45] Checking for file '/usr/bin/lpstree' [ Not found ] [23:45:45] Checking for file '/usr/bin/ltop' [ Not found ] [23:45:45] Checking for file '/usr/bin/lkillall' [ Not found ] [23:45:45] Checking for file '/usr/bin/ldu' [ Not found ] [23:45:45] Checking for file '/usr/bin/lnetstat' [ Not found ] [23:45:45] Checking for file '/usr/bin/wp' [ Not found ] [23:45:45] Checking for file '/usr/bin/shad' [ Not found ] [23:45:45] Checking for file '/usr/bin/vadim' [ Not found ] [23:45:45] Checking for file '/usr/bin/slice' [ Not found ] [23:45:45] Checking for file '/usr/bin/cleaner' [ Not found ] [23:45:45] Checking for file '/usr/include/rpcsvc/du' [ Not found ] [23:45:45] RH-Sharpe's Rootkit [ Not found ] [23:45:45] [23:45:45] Checking for RSHA's Rootkit... [23:45:45] Checking for file '/bin/kr4p' [ Not found ] [23:45:46] Checking for file '/usr/bin/n3tstat' [ Not found ] [23:45:46] Checking for file '/usr/bin/chsh2' [ Not found ] [23:45:46] Checking for file '/usr/bin/slice2' [ Not found ] [23:45:46] Checking for file '/usr/src/linux/arch/alpha/lib/.lib/.1proc' [ Not found ] [23:45:46] Checking for file '/etc/rc.d/arch/alpha/lib/.lib/.1addr' [ Not found ] [23:45:46] Checking for directory '/etc/rc.d/rsha' [ Not found ] [23:45:46] Checking for directory '/etc/rc.d/arch/alpha/lib/.lib' [ Not found ]

από **taratatzoum** » 20 Δεκ 2008, 01:08

Κώδικας: Επιλογή όλων: [23:45:46] RSHA's Rootkit [ Not found ] [23:45:46] [23:45:46] Checking for Scalper Worm... [23:45:46] Checking for file '/tmp/.a' [ Not found ] [23:45:46] Checking for file '/tmp/.uua' [ Not found ] [23:45:46] Scalper Worm [ Not found ] [23:45:46] [23:45:46] Checking for Sebek LKM... [23:45:47] Checking for kernel symbol 'adore or sebek' [ Not found ] [23:45:47] Sebek LKM [ Not found ] [23:45:47] [23:45:47] Checking for Shutdown Rootkit... [23:45:47] Checking for file '/usr/man/man5/.. /.dir/scannah/asus' [ Not found ] [23:45:47] Checking for file '/usr/man/man5/.. /.dir/see' [ Not found ] [23:45:47] Checking for file '/usr/man/man5/.. /.dir/nscd' [ Not found ] [23:45:47] Checking for file '/usr/man/man5/.. /.dir/alpd' [ Not found ] [23:45:47] Checking for file '/etc/rc.d/rc.local ' [ Not found ] [23:45:47] Checking for directory '/usr/man/man5/.. /.dir' [ Not found ] [23:45:47] Checking for directory '/usr/man/man5/.. /.dir/scannah' [ Not found ] [23:45:47] Checking for directory '/etc/rc.d/rc0.d/.. /.dir' [ Not found ] [23:45:47] Shutdown Rootkit [ Not found ] [23:45:47] [23:45:47] Checking for SHV4 Rootkit... [23:45:47] Checking for file '/etc/ld.so.hash' [ Not found ] [23:45:47] Checking for file '/lib/libext-2.so.7' [ Not found ] [23:45:48] Checking for file '/lib/lidps1.so' [ Not found ] [23:45:48] Checking for file '/usr/sbin/xntps' [ Not found ] [23:45:48] Checking for directory '/lib/security/.config' [ Not found ] [23:45:48] Checking for directory '/lib/security/.config/ssh' [ Not found ] [23:45:48] SHV4 Rootkit [ Not found ] [23:45:48] [23:45:48] Checking for SHV5 Rootkit... [23:45:48] Checking for file '/etc/sh.conf' [ Not found ] [23:45:48] Checking for file '/dev/srd0' [ Not found ] [23:45:48] Checking for directory '/usr/lib/libsh' [ Not found ] [23:45:48] SHV5 Rootkit [ Not found ] [23:45:48] [23:45:48] Checking for Sin Rootkit... [23:45:48] Checking for file '/dev/.haos/haos1/.f/Denyed' [ Not found ] [23:45:48] Checking for file '/dev/ttyoa' [ Not found ] [23:45:48] Checking for file '/dev/ttyof' [ Not found ] [23:45:48] Checking for file '/dev/ttyop' [ Not found ] [23:45:48] Checking for file '/dev/ttyos' [ Not found ] [23:45:48] Checking for file '/usr/lib/.lib' [ Not found ] [23:45:49] Checking for file '/usr/lib/sn/.X' [ Not found ] [23:45:49] Checking for file '/usr/lib/sn/.sys' [ Not found ] [23:45:49] Checking for file '/usr/lib/ld/.X' [ Not found ] [23:45:49] Checking for file '/usr/man/man1/...' [ Not found ] [23:45:49] Checking for file '/usr/man/man1/.../.m' [ Not found ] [23:45:49] Checking for file '/usr/man/man1/.../.w' [ Not found ] [23:45:49] Checking for directory '/usr/lib/sn' [ Not found ] [23:45:49] Checking for directory '/usr/lib/man1/...' [ Not found ] [23:45:49] Checking for directory '/dev/.haos' [ Not found ] [23:45:49] Sin Rootkit [ Not found ] [23:45:49] [23:45:49] Checking for Slapper Worm... [23:45:49] Checking for file '/tmp/.bugtraq' [ Not found ] [23:45:49] Checking for file '/tmp/.uubugtraq' [ Not found ] [23:45:49] Checking for file '/tmp/.bugtraq.c' [ Not found ] [23:45:50] Checking for file '/tmp/httpd' [ Not found ] [23:45:50] Checking for file '/tmp/.unlock' [ Not found ] [23:45:50] Checking for file '/tmp/update' [ Not found ] [23:45:50] Checking for file '/tmp/.cinik' [ Not found ] [23:45:50] Checking for file '/tmp/.b' [ Not found ] [23:45:50] Slapper Worm [ Not found ] [23:45:50] [23:45:50] Checking for Sneakin Rootkit... [23:45:50] Checking for directory '/tmp/.X11-unix/.../rk' [ Not found ] [23:45:50] Sneakin Rootkit [ Not found ] [23:45:50] [23:45:50] Checking for Suckit Rootkit... [23:45:50] Checking for file '/sbin/initsk12' [ Not found ] [23:45:50] Checking for file '/sbin/initxrk' [ Not found ] [23:45:50] Checking for file '/usr/bin/null' [ Not found ] [23:45:50] Checking for file '/usr/share/locale/sk/.sk12/sk' [ Not found ] [23:45:50] Checking for file '/etc/rc.d/rc0.d/S23kmdac' [ Not found ] [23:45:50] Checking for file '/etc/rc.d/rc1.d/S23kmdac' [ Not found ] [23:45:50] Checking for file '/etc/rc.d/rc2.d/S23kmdac' [ Not found ] [23:45:50] Checking for file '/etc/rc.d/rc3.d/S23kmdac' [ Not found ] [23:45:51] Checking for file '/etc/rc.d/rc4.d/S23kmdac' [ Not found ] [23:45:51] Checking for file '/etc/rc.d/rc5.d/S23kmdac' [ Not found ] [23:45:51] Checking for file '/etc/rc.d/rc6.d/S23kmdac' [ Not found ] [23:45:51] Checking for directory '/dev/sdhu0/tehdrakg' [ Not found ] [23:45:51] Checking for directory '/etc/.MG' [ Not found ] [23:45:51] Checking for directory '/usr/share/locale/sk/.sk12' [ Not found ] [23:45:51] Checking for directory '/usr/lib/perl5/site_perl/i386-linux/auto/TimeDate/.packlist' [ Not found ] [23:45:51] Suckit Rootkit [ Not found ] [23:45:51] [23:45:51] Checking for SunOS Rootkit... [23:45:51] Checking for file '/etc/ld.so.hash' [ Not found ] [23:45:51] Checking for file '/lib/libext-2.so.7' [ Not found ] [23:45:51] Checking for file '/usr/bin/ssh2d' [ Not found ] [23:45:51] Checking for file '/bin/xlogin' [ Not found ] [23:45:51] Checking for file '/usr/lib/crth.o' [ Not found ] [23:45:51] Checking for file '/usr/lib/crtz.o' [ Not found ] [23:45:51] Checking for file '/sbin/login' [ Not found ] [23:45:51] Checking for file '/lib/security/.config/sn' [ Not found ] [23:45:51] Checking for file '/lib/security/.config/lpsched' [ Not found ] [23:45:52] Checking for file '/dev/kmod' [ Not found ] [23:45:52] Checking for file '/dev/dos' [ Not found ] [23:45:52] SunOS Rootkit [ Not found ] [23:45:52] [23:45:52] Checking for SunOS / NSDAP Rootkit... [23:45:52] Checking for file '/usr/lib/vold/nsdap/.kit' [ Not found ] [23:45:52] Checking for file '/usr/lib/vold/nsdap/defines' [ Not found ] [23:45:52] Checking for file '/usr/lib/vold/nsdap/patcher' [ Not found ] [23:45:52] Checking for file '/usr/lib/vold/nsdap/pg' [ Not found ] [23:45:52] Checking for file '/usr/lib/vold/nsdap/cleaner' [ Not found ] [23:45:52] Checking for file '/usr/lib/vold/nsdap/utime' [ Not found ] [23:45:52] Checking for file '/usr/lib/vold/nsdap/crypt' [ Not found ] [23:45:52] Checking for file '/usr/lib/vold/nsdap/findkit' [ Not found ] [23:45:52] Checking for file '/usr/lib/vold/nsdap/sn2' [ Not found ] [23:45:52] Checking for file '/usr/lib/vold/nsdap/sniffload' [ Not found ] [23:45:52] Checking for file '/usr/lib/vold/nsdap/runsniff' [ Not found ] [23:45:53] Checking for file '/usr/lib/lpset' [ Not found ] [23:45:53] Checking for directory '/usr/lib/vold/nsdap' [ Not found ] [23:45:53] SunOS / NSDAP Rootkit [ Not found ] [23:45:53] [23:45:53] Checking for Superkit Rootkit... [23:45:53] Checking for file '/usr/man/.sman/sk' [ Not found ] [23:45:53] Superkit Rootkit [ Not found ] [23:45:53] [23:45:53] Checking for TBD (Telnet BackDoor)... [23:45:53] Checking for file '/usr/lib/.tbd' [ Not found ] [23:45:53] TBD (Telnet BackDoor) [ Not found ] [23:45:53] [23:45:53] Checking for TeLeKiT Rootkit... [23:45:53] Checking for file '/usr/man/man3/.../TeLeKiT/bin/sniff' [ Not found ] [23:45:53] Checking for file '/usr/man/man3/.../TeLeKiT/bin/telnetd' [ Not found ] [23:45:53] Checking for file '/usr/man/man3/.../TeLeKiT/bin/teleulo' [ Not found ] [23:45:53] Checking for file '/usr/man/man3/.../cl' [ Not found ] [23:45:53] Checking for file '/dev/ptyr' [ Not found ] [23:45:53] Checking for file '/dev/ptyp' [ Not found ] [23:45:53] Checking for file '/dev/ptyq' [ Not found ] [23:45:53] Checking for file '/dev/hda06' [ Not found ] [23:45:54] Checking for file '/usr/info/libc1.so' [ Not found ] [23:45:54] Checking for directory '/usr/man/man3/...' [ Not found ] [23:45:54] Checking for directory '/usr/man/man3/.../lsniff' [ Not found ] [23:45:54] Checking for directory '/usr/man/man3/.../TeLeKiT' [ Not found ] [23:45:54] TeLeKiT Rootkit [ Not found ] [23:45:54] [23:45:54] Checking for T0rn Rootkit... [23:45:54] Checking for file '/dev/.lib/lib/lib/t0rns' [ Not found ] [23:45:54] Checking for file '/dev/.lib/lib/lib/du' [ Not found ] [23:45:54] Checking for file '/dev/.lib/lib/lib/ls' [ Not found ] [23:45:54] Checking for file '/dev/.lib/lib/lib/t0rnsb' [ Not found ] [23:45:54] Checking for file '/dev/.lib/lib/lib/ps' [ Not found ] [23:45:54] Checking for file '/dev/.lib/lib/lib/t0rnp' [ Not found ] [23:45:54] Checking for file '/dev/.lib/lib/lib/find' [ Not found ] [23:45:54] Checking for file '/dev/.lib/lib/lib/ifconfig' [ Not found ] [23:45:54] Checking for file '/dev/.lib/lib/lib/pg' [ Not found ] [23:45:55] Checking for file '/dev/.lib/lib/lib/ssh.tgz' [ Not found ] [23:45:55] Checking for file '/dev/.lib/lib/lib/top' [ Not found ] [23:45:55] Checking for file '/dev/.lib/lib/lib/sz' [ Not found ] [23:45:55] Checking for file '/dev/.lib/lib/lib/login' [ Not found ] [23:45:55] Checking for file '/dev/.lib/lib/lib/in.fingerd' [ Not found ] [23:45:55] Checking for file '/dev/.lib/lib/lib/1i0n.sh' [ Not found ] [23:45:55] Checking for file '/dev/.lib/lib/lib/pstree' [ Not found ] [23:45:55] Checking for file '/dev/.lib/lib/lib/in.telnetd' [ Not found ] [23:45:55] Checking for file '/dev/.lib/lib/lib/mjy' [ Not found ] [23:45:55] Checking for file '/dev/.lib/lib/lib/sush' [ Not found ] [23:45:55] Checking for file '/dev/.lib/lib/lib/tfn' [ Not found ] [23:45:55] Checking for file '/dev/.lib/lib/lib/name' [ Not found ] [23:45:55] Checking for file '/dev/.lib/lib/lib/getip.sh' [ Not found ] [23:45:55] Checking for file '/usr/info/.torn/sh*' [ Not found ] [23:45:55] Checking for file '/usr/src/.puta/.1addr' [ Not found ] [23:45:55] Checking for file '/usr/src/.puta/.1file' [ Not found ] [23:45:56] Checking for file '/usr/src/.puta/.1proc' [ Not found ] [23:45:56] Checking for file '/usr/src/.puta/.1logz' [ Not found ] [23:45:56] Checking for file '/usr/info/.t0rn' [ Not found ] [23:45:56] Checking for directory '/dev/.lib' [ Not found ] [23:45:56] Checking for directory '/dev/.lib/lib' [ Not found ] [23:45:56] Checking for directory '/dev/.lib/lib/lib' [ Not found ] [23:45:56] Checking for directory '/dev/.lib/lib/lib/dev' [ Not found ] [23:45:56] Checking for directory '/dev/.lib/lib/scan' [ Not found ] [23:45:56] Checking for directory '/usr/src/.puta' [ Not found ] [23:45:56] Checking for directory '/usr/man/man1/man1' [ Not found ] [23:45:56] Checking for directory '/usr/man/man1/man1/lib' [ Not found ] [23:45:56] Checking for directory '/usr/man/man1/man1/lib/.lib' [ Not found ] [23:45:56] Checking for directory '/usr/man/man1/man1/lib/.lib/.backup' [ Not found ] [23:45:56] T0rn Rootkit [ Not found ] [23:45:56] [23:45:56] Checking for Trojanit Kit... [23:45:56] Checking for file '/bin/.ls' [ Not found ] [23:45:57] Checking for file '/bin/.ps' [ Not found ] [23:45:57] Checking for file '/bin/.netstat' [ Not found ] [23:45:57] Checking for file '/usr/bin/.nop' [ Not found ] [23:45:57] Checking for file '/usr/bin/.who' [ Not found ] [23:45:57] Trojanit Kit [ Not found ] [23:45:57] [23:45:57] Checking for Tuxtendo Rootkit... [23:45:57] Checking for file '/dev/tux/.addr' [ Not found ] [23:45:57] Checking for file '/dev/tux/.cron' [ Not found ] [23:45:57] Checking for file '/dev/tux/.file' [ Not found ] [23:45:57] Checking for file '/dev/tux/.log' [ Not found ] [23:45:57] Checking for file '/dev/tux/.proc' [ Not found ] [23:45:57] Checking for file '/dev/tux/backup/crontab' [ Not found ] [23:45:57] Checking for file '/dev/tux/backup/df' [ Not found ] [23:45:57] Checking for file '/dev/tux/backup/dir' [ Not found ] [23:45:57] Checking for file '/dev/tux/backup/find' [ Not found ] [23:45:57] Checking for file '/dev/tux/backup/ifconfig' [ Not found ] [23:45:58] Checking for file '/dev/tux/backup/locate' [ Not found ] [23:45:58] Checking for file '/dev/tux/backup/netstat' [ Not found ] [23:45:58] Checking for file '/dev/tux/backup/ps' [ Not found ] [23:45:58] Checking for file '/dev/tux/backup/pstree' [ Not found ] [23:45:58] Checking for file '/dev/tux/backup/syslogd' [ Not found ] [23:45:58] Checking for file '/dev/tux/backup/tcpd' [ Not found ] [23:45:58] Checking for file '/dev/tux/backup/top' [ Not found ] [23:45:58] Checking for file '/dev/tux/backup/updatedb' [ Not found ] [23:45:58] Checking for file '/dev/tux/backup/vdir' [ Not found ] [23:45:58] Checking for directory '/dev/tux' [ Not found ] [23:45:58] Checking for directory '/dev/tux/ssh2' [ Not found ] [23:45:58] Checking for directory '/dev/tux/backup' [ Not found ] [23:45:58] Tuxtendo Rootkit [ Not found ] [23:45:58] [23:45:58] Checking for URK Rootkit... [23:45:58] Checking for file '/usr/man/man1/xxxxxxbin/find' [ Not found ] [23:45:58] Checking for file '/usr/man/man1/xxxxxxbin/du' [ Not found ] [23:45:58] Checking for file '/usr/man/man1/xxxxxxbin/ps' [ Not found ] [23:45:58] Checking for file '/tmp/conf.inf' [ Not found ] [23:45:58] Checking for directory '/usr/man/man1/xxxxxxbin' [ Not found ] [23:45:59] URK Rootkit [ Not found ] [23:45:59] [23:45:59] Checking for VcKit Rootkit... [23:45:59] Checking for directory '/usr/include/linux/modules/lib.so' [ Not found ] [23:45:59] Checking for directory '/usr/include/linux/modules/lib.so/bin' [ Not found ] [23:45:59] VcKit Rootkit [ Not found ] [23:45:59] [23:45:59] Checking for Volc Rootkit... [23:45:59] Checking for directory '/var/spool/.recent' [ Not found ] [23:45:59] Checking for directory '/var/spool/.recent/.files' [ Not found ] [23:45:59] Checking for directory '/usr/lib/volc' [ Not found ] [23:45:59] Checking for directory '/usr/lib/volc/backup' [ Not found ] [23:45:59] Volc Rootkit [ Not found ] [23:45:59] [23:45:59] Checking for X-Org SunOS Rootkit... [23:45:59] Checking for file '/usr/lib/libX.a/bin/tmpfl' [ Not found ] [23:45:59] Checking for file '/usr/lib/libX.a/bin/rps' [ Not found ] [23:45:59] Checking for file '/usr/bin/srload' [ Not found ] [23:45:59] Checking for file '/usr/lib/libX.a/bin/sparcv7/rps' [ Not found ] [23:45:59] Checking for file '/usr/sbin/modcheck' [ Not found ] [23:46:00] Checking for directory '/usr/lib/libX.a' [ Not found ] [23:46:00] Checking for directory '/usr/lib/libX.a/bin' [ Not found ] [23:46:00] Checking for directory '/usr/lib/libX.a/bin/sparcv7' [ Not found ] [23:46:00] Checking for directory '/usr/share/man...' [ Not found ] [23:46:00] X-Org SunOS Rootkit [ Not found ] [23:46:00] [23:46:00] Checking for zaRwT.KiT Rootkit... [23:46:00] Checking for file '/dev/rd/s/sendmeil' [ Not found ] [23:46:00] Checking for file '/dev/ttyf' [ Not found ] [23:46:00] Checking for file '/dev/ttyp' [ Not found ] [23:46:00] Checking for file '/dev/ttyn' [ Not found ] [23:46:00] Checking for file '/rk/tulz' [ Not found ] [23:46:00] Checking for directory '/rk' [ Not found ] [23:46:00] Checking for directory '/dev/rd/s' [ Not found ] [23:46:00] zaRwT.KiT Rootkit [ Not found ] [23:46:00] [23:46:00] Performing additional rootkit checks [23:46:00] Info: Starting test name 'additional_rkts' [23:46:00] [23:46:00] Performing Suckit Rookit additional checks [23:46:00] Checking /sbin/init link count [ OK ] [23:46:01] Checking for hidden file extensions [ None found ] [23:46:01] Running skdet command [ Skipped ] [23:46:01] Info: Unable to find the 'skdet' command [23:46:01] Suckit Rookit additional checks [ OK ] [23:46:01] [23:46:01] Performing check of possible rootkit files and directories [23:46:01] Info: Starting test name 'possible_rkt_files' [23:46:01] Checking for file '/dev/sdr0' [ Not found ] [23:46:01] Checking for file '/tmp/.syshackfile' [ Not found ] [23:46:01] Checking for file '/tmp/.bash_history' [ Not found ] [23:46:01] Checking for file '/usr/info/.clib' [ Not found ] [23:46:01] Checking for file '/usr/sbin/tcp.log' [ Not found ] [23:46:01] Checking for file '/usr/bin/take/pid' [ Not found ] [23:46:01] Checking for file '/sbin/create' [ Not found ] [23:46:01] Checking for file '/dev/ttypz' [ Not found ] [23:46:02] Checking for directory '/usr/bin/take' [ Not found ] [23:46:02] Checking for directory '/usr/src/.lib' [ Not found ] [23:46:02] Checking for directory '/usr/share/man/man1/.1c' [ Not found ] [23:46:02] Checking for directory '/lib/lblip.tk' [ Not found ] [23:46:02] Checking for directory '/usr/sbin/...' [ Not found ] [23:46:02] Checking for directory '/usr/share/.gun' [ Not found ] [23:46:02] Checking for possible rootkit files and directories [ None found ] [23:46:02] [23:46:02] Performing check for possible rootkit strings [23:46:02] Info: Starting test name 'possible_rkt_strings' [23:46:02] Info: Found local startup file: /etc/rc.local [23:46:02] Checking for string '/dev/proc/fuckit' [ Not found ] [23:46:02] Checking for string 'f***' [ Not found ] [23:46:02] Checking for string 'backdoor' [ Not found ] [23:46:02] Checking for string 'vt200' [ Not found ] [23:46:03] Checking for string '/usr/bin/xstat' [ Not found ] [23:46:03] Checking for string '/bin/envpc' [ Not found ] [23:46:03] Checking for string 'L4m3r0x' [ Not found ] [23:46:03] Checking for string '/usr/lib/.tbd' [ Not found ] [23:46:03] Checking for string '/dev/ptyxx/.file' [ Not found ] [23:46:03] Checking for string '/dev/sgk' [ Not found ] [23:46:03] Checking for string '/var/lock/subsys/...datafile...' [ Not found ] [23:46:03] Checking for string '/usr/lib/.tbd' [ Not found ] [23:46:03] Checking for string '/dev/proc/fuckit' [ Not found ] [23:46:03] Checking for string '/lib/.sso' [ Not found ] [23:46:03] Checking for string '/var/lock/subsys/...datafile...' [ Not found ] [23:46:03] Checking for string '/dev/caca' [ Not found ] [23:46:03] Checking for string '/dev/ttyoa' [ Not found ] [23:46:04] Checking for string 'syg' [ Not found ] [23:46:04] Checking for string '/dev/pts/01' [ Not found ] [23:46:04] Checking for string 'tw33dl3' [ Not found ] [23:46:04] Checking for string 'psniff' [ Not found ] [23:46:04] Checking for string '/var/lock/subsys/...datafile...' [ Not found ] [23:46:04] Checking for string 'promiscuous' [ Not found ] [23:46:04] Checking for string '/usr/lib/.tbd' [ Not found ] [23:46:04] Checking for string '/dev/xdta' [ Not found ] [23:46:04] Checking for string '/usr/lib/.tbd' [ Not found ] [23:46:04] Checking for string 'in.inetd' [ Not found ] [23:46:05] Checking for string '#<HIDE_.*>' [ Not found ] [23:46:05] Checking for string 'bin/xchk' [ Not found ] [23:46:05] Checking for string 'bin/xsf' [ Not found ] [23:46:05] Checking for possible rootkit strings [ None found ] [23:46:05] [23:46:05] Performing malware checks [23:46:05] Info: Starting test name 'malware' [23:46:05] [23:46:05] Info: Test 'deleted_files' disabled at users request. [23:46:05] Info: Starting test name 'running_procs' [23:46:05] Checking running processes for suspicious files [ None found ] [23:46:06] [23:46:06] Info: Test 'hidden_procs' disabled at users request. [23:46:06] [23:46:06] Info: Test 'suspscan' disabled at users request. [23:46:06] [23:46:06] Performing check for login backdoors [23:46:06] Info: Starting test name 'other_malware' [23:46:06] Checking for '/bin/.login' [ Not found ] [23:46:06] Checking for '/sbin/.login' [ Not found ] [23:46:06] Checking for login backdoors [ None found ] [23:46:06] [23:46:06] Performing check for suspicious directories [23:46:06] Checking for directory '/usr/X11R6/bin/.,/copy' [ Not found ] [23:46:06] Checking for directory '/dev/rd/cdb' [ Not found ] [23:46:06] Checking for suspicious directories [ None found ] [23:46:06] [23:46:06] Checking for software intrusions [ Skipped ] [23:46:06] Info: Check skipped - tripwire not installed [23:46:06] [23:46:06] Performing check for sniffer log files [23:46:06] Checking for file '/usr/lib/libice.log' [ Not found ] [23:46:06] Checking for sniffer log files [ None found ] [23:46:06] [23:46:06] Performing trojan specific checks [23:46:06] Info: Starting test name 'trojans' [23:46:06] Info: Using inetd configuration file '/etc/inetd.conf' [23:46:07] Checking for enabled inetd services [ OK ] [23:46:07] [23:46:07] Performing check for enabled xinetd services [23:46:07] Checking for enabled xinetd services [ Skipped ] [23:46:07] Info: Check skipped - file '/etc/xinetd.conf' does not exist. [23:46:07] Info: Apache backdoor check skipped: Apache modules and configuration directories not found. [23:46:07] [23:46:07] Performing Linux specific checks [23:46:07] Info: Starting test name 'os_specific' [23:46:07] Checking kernel module commands [ OK ] [23:46:07] Info: Using modules pathname of '/lib/modules/2.6.24-22-rt' [23:46:07] Checking kernel module names [ OK ] [23:46:23] [23:46:23] Checking the network... [23:46:23] Info: Starting test name 'network' [23:46:23] Info: Starting test name 'ports' [23:46:23] [23:46:23] Performing check for backdoor ports [23:46:24] Checking for UDP port 2001 [ Not found ] [23:46:24] Checking for TCP port 2006 [ Not found ] [23:46:24] Checking for TCP port 2128 [ Not found ] [23:46:25] Checking for TCP port 14856 [ Not found ] [23:46:25] Checking for TCP port 47107 [ Not found ] [23:46:25] Checking for TCP port 60922 [ Not found ] [23:46:25] [23:46:25] Performing checks on the network interfaces [23:46:25] Info: Starting test name 'promisc' [23:46:26] Checking for promiscuous interfaces [ None found ] [23:46:26] [23:46:26] Info: Test 'packet_cap_apps' disabled at users request. [23:46:32] [23:46:32] Checking the local host... [23:46:32] Info: Starting test name 'local_host' [23:46:32] [23:46:32] Performing system boot checks [23:46:32] Info: Starting test name 'startup_files' [23:46:33] Checking for local host name [ Found ] [23:46:33] Info: Starting test name 'startup_malware' [23:46:33] Info: Found local startup file: /etc/rc.local [23:46:33] Checking for local startup files [ Found ] [23:46:33] Checking local startup files for malware [ None found ] [23:46:33] Info: Found system startup directory: /etc/init.d [23:46:35] Checking system startup files for malware [ None found ] [23:46:35] [23:46:35] Performing group and account checks [23:46:35] Info: Starting test name 'group_accounts' [23:46:35] Checking for passwd file [ Found ] [23:46:35] Info: Found password file: /etc/passwd [23:46:35] Checking for root equivalent (UID 0) accounts [ None found ] [23:46:35] Info: Found shadow file: /etc/shadow [23:46:35] Checking for passwordless accounts [ None found ] [23:46:35] Info: Starting test name 'passwd_changes' [23:46:35] Checking for passwd file changes [ None found ] [23:46:35] Info: Starting test name 'group_changes' [23:46:35] Checking for group file changes [ None found ] [23:46:35] Checking root account shell history files [ OK ] [23:46:35] [23:46:35] Performing system configuration file checks [23:46:35] Info: Starting test name 'system_configs' [23:46:35] Checking for SSH configuration file [ Not found ] [23:46:35] Checking for running syslog daemon [ Found ] [23:46:36] Checking for syslog configuration file [ Found ] [23:46:36] Info: Found syslog configuration file: /etc/syslog.conf [23:46:36] Checking if syslog remote logging is allowed [ Not allowed ] [23:46:36] [23:46:36] Performing filesystem checks [23:46:36] Info: Starting test name 'filesystem' [23:46:36] Info: SCAN_MODE_DEV set to 'THOROUGH' [23:47:56] Checking /dev for suspicious file types [ Warning ] [23:47:56] Warning: Suspicious file types found in /dev: [23:47:56] /dev/shm/pulse-shm-1155760789: data [23:47:56] /dev/shm/pulse-shm-4019048598: data [23:47:57] Checking for hidden files and directories [ Warning ] [23:47:57] Warning: Hidden directory found: /etc/.java [23:47:57] Warning: Hidden directory found: /dev/.static [23:47:57] Warning: Hidden directory found: /dev/.udev [23:47:57] Warning: Hidden directory found: /dev/.initramfs [23:47:59] [23:47:59] Checking application versions... [23:47:59] Info: Starting test name 'apps' [23:47:59] Checking version of Exim MTA [ OK ] [23:47:59] Info: Application 'exim' version '4.69' found. [23:47:59] Checking version of GnuPG [ OK ] [23:48:00] Info: Application 'gpg' version '1.4.6' found. [23:48:00] Info: Application 'httpd' not found. [23:48:00] Info: Application 'named' not found. [23:48:00] Checking version of OpenSSL [ OK ] [23:48:00] Info: Application 'openssl' version '0.9.8g' found. [23:48:00] Info: Application 'php' not found. [23:48:00] Info: Application 'procmail' not found. [23:48:00] Info: Application 'proftpd' not found. [23:48:00] Info: Application 'sshd' not found. [23:48:00] Info: Applications checked: 3 out of 9 [23:48:00] [23:48:00] System checks summary [23:48:00] ===================== [23:48:00] [23:48:00] File properties checks... [23:48:00] Files checked: 123 [23:48:00] Suspect files: 23 [23:48:00] [23:48:00] Rootkit checks... [23:48:00] Rootkits checked : 109 [23:48:00] Possible rootkits: 0 [23:48:00] [23:48:00] Applications checks... [23:48:00] Applications checked: 3 [23:48:00] Suspect applications: 0 [23:48:00] [23:48:00] The system checks took: 3 minutes and 27 seconds [23:48:01] [23:48:01] Info: End date is Παρ 19 Δεκ 2008 11:48:01 μμ EET

από **linuxman** » 20 Δεκ 2008, 03:27

Για εκτέλεσε τα παρακάτω με την σειρά και πες μετά για το αποτέλεσμα

Κώδικας: Επιλογή όλων: sudo rkhunter --update (--update the file properties database ) sudo rkhunter --propupd sudo rkhunter --check

από **taratatzoum** » 20 Δεκ 2008, 15:57

Κώδικας: Επιλογή όλων: rizitis@dell-rizitis:~$ sudo rkhunter --update [sudo] password for rizitis: [ Rootkit Hunter version 1.3.0 ] Checking rkhunter data files... Checking file mirrors.dat [ No update ] Checking file programs_bad.dat [ No update ] Checking file backdoorports.dat [ No update ] Checking file suspscan.dat [ No update ] Checking file i18n/cn [ No update ] Checking file i18n/en [ No update ] Checking file i18n/zh [ No update ] Checking file i18n/zhutf [ No update ] rizitis@dell-rizitis:~$

Κώδικας: Επιλογή όλων: rizitis@dell-rizitis:~$ sudo rkhunter --propupd [sudo] password for rizitis: [ Rootkit Hunter version 1.3.0 ] File updated: searched for 150 files, found 123

Κώδικας: Επιλογή όλων: rizitis@dell-rizitis:~$ sudo rkhunter --check [ Rootkit Hunter version 1.3.0 ] Checking system commands... Performing 'strings' command checks Checking 'strings' command [ OK ] Performing 'shared libraries' checks Checking for preloading variables [ None found ] Checking for preload file [ Not found ] Checking LD_LIBRARY_PATH variable [ Not found ] Performing file properties checks Checking for prerequisites [ OK ] /bin/bash [ OK ] /bin/cat [ OK ] /bin/chmod [ OK ] /bin/chown [ OK ] /bin/cp [ OK ] /bin/date [ OK ] /bin/df [ OK ] /bin/dmesg [ OK ] /bin/echo [ OK ] /bin/ed [ OK ] /bin/egrep [ OK ] /bin/fgrep [ OK ] /bin/grep [ OK ] /bin/ip [ OK ] /bin/kill [ OK ] /bin/login [ OK ] /bin/ls [ OK ] /bin/lsmod [ OK ] /bin/mktemp [ OK ] /bin/more [ OK ] /bin/mount [ OK ] /bin/mv [ OK ] /bin/netstat [ OK ] /bin/ps [ OK ] /bin/pwd [ OK ] /bin/readlink [ OK ] /bin/sed [ OK ] /bin/sh [ OK ] /bin/su [ OK ] /bin/touch [ OK ] /bin/uname [ OK ] /bin/which [ OK ] /bin/dash [ OK ] /usr/bin/awk [ OK ] /usr/bin/basename [ OK ] /usr/bin/chattr [ OK ] /usr/bin/cut [ OK ] /usr/bin/diff [ OK ] /usr/bin/dirname [ OK ] /usr/bin/dpkg [ OK ] /usr/bin/dpkg-query [ OK ] /usr/bin/du [ OK ] /usr/bin/env [ OK ] /usr/bin/file [ OK ] /usr/bin/find [ OK ] /usr/bin/GET [ OK ] /usr/bin/groups [ OK ] /usr/bin/head [ OK ] /usr/bin/id [ OK ] /usr/bin/killall [ OK ] /usr/bin/last [ OK ] /usr/bin/lastlog [ OK ] /usr/bin/ldd [ OK ] /usr/bin/less [ OK ] /usr/bin/locate [ OK ] /usr/bin/logger [ OK ] /usr/bin/lsattr [ OK ] /usr/bin/lsof [ OK ] /usr/bin/md5sum [ OK ] /usr/bin/mlocate [ OK ] /usr/bin/newgrp [ OK ] /usr/bin/passwd [ OK ] /usr/bin/perl [ OK ] /usr/bin/pstree [ OK ] /usr/bin/rkhunter [ OK ] /usr/bin/rpm [ OK ] /usr/bin/runcon [ OK ] /usr/bin/sha1sum [ OK ] /usr/bin/size [ OK ] /usr/bin/sort [ OK ] /usr/bin/stat [ OK ] /usr/bin/strace [ OK ] /usr/bin/strings [ OK ] /usr/bin/sudo [ OK ] /usr/bin/tail [ OK ] /usr/bin/test [ OK ] /usr/bin/top [ OK ] /usr/bin/touch [ OK ] /usr/bin/tr [ OK ] /usr/bin/uniq [ OK ] /usr/bin/users [ OK ] /usr/bin/vmstat [ OK ] /usr/bin/w [ OK ] /usr/bin/watch [ OK ] /usr/bin/wc [ OK ] /usr/bin/wget [ OK ] /usr/bin/whatis [ OK ] /usr/bin/whereis [ OK ] /usr/bin/which [ OK ] /usr/bin/who [ OK ] /usr/bin/whoami [ OK ] /usr/bin/mawk [ OK ] /usr/bin/lwp-request [ OK ] /usr/bin/w.procps [ OK ] /sbin/depmod [ OK ] /sbin/ifconfig [ OK ] /sbin/ifdown [ OK ] /sbin/ifup [ OK ] /sbin/init [ OK ] /sbin/insmod [ OK ] /sbin/ip [ OK ] /sbin/lsmod [ OK ] /sbin/modinfo [ OK ] /sbin/modprobe [ OK ] /sbin/rmmod [ OK ] /sbin/runlevel [ OK ] /sbin/sulogin [ OK ] /sbin/sysctl [ OK ] /sbin/syslogd [ OK ] /usr/sbin/adduser [ OK ] /usr/sbin/chroot [ OK ] /usr/sbin/cron [ OK ] /usr/sbin/groupadd [ OK ] /usr/sbin/groupdel [ OK ] /usr/sbin/groupmod [ OK ] /usr/sbin/grpck [ OK ] /usr/sbin/nologin [ OK ] /usr/sbin/pwck [ OK ] /usr/sbin/tcpd [ OK ] /usr/sbin/useradd [ OK ] /usr/sbin/userdel [ OK ] /usr/sbin/usermod [ OK ] /usr/sbin/vipw [ OK ] [Press <ENTER> to continue] Checking for rootkits... Performing check of known rootkit files and directories 55808 Trojan - Variant A [ Not found ] ADM Worm [ Not found ] AjaKit Rootkit [ Not found ] aPa Kit [ Not found ] Apache Worm [ Not found ] Ambient (ark) Rootkit [ Not found ] Balaur Rootkit [ Not found ] BeastKit Rootkit [ Not found ] beX2 Rootkit [ Not found ] BOBKit Rootkit [ Not found ] CiNIK Worm (Slapper.B variant) [ Not found ] Danny-Boy's Abuse Kit [ Not found ] Devil RootKit [ Not found ] Dica-Kit Rootkit [ Not found ] Dreams Rootkit [ Not found ] Duarawkz Rootkit [ Not found ] Enye LKM [ Not found ] Flea Linux Rootkit [ Not found ] FreeBSD Rootkit [ Not found ] f***`it Rootkit [ Not found ] GasKit Rootkit [ Not found ] Heroin LKM [ Not found ] HjC Kit [ Not found ] ignoKit Rootkit [ Not found ] ImperalsS-FBRK Rootkit [ Not found ] Irix Rootkit [ Not found ] Kitko Rootkit [ Not found ] Knark Rootkit [ Not found ] Li0n Worm [ Not found ] Lockit / LJK2 Rootkit [ Not found ] Mood-NT Rootkit [ Not found ] MRK Rootkit [ Not found ] Ni0 Rootkit [ Not found ] Ohhara Rootkit [ Not found ] Optic Kit (Tux) Worm [ Not found ] Oz Rootkit [ Not found ] Phalanx Rootkit [ Not found ] Phalanx Rootkit (strings) [ Not found ] Portacelo Rootkit [ Not found ] R3dstorm Toolkit [ Not found ] RH-Sharpe's Rootkit [ Not found ] RSHA's Rootkit [ Not found ] Scalper Worm [ Not found ] Sebek LKM [ Not found ] Shutdown Rootkit [ Not found ] SHV4 Rootkit [ Not found ] SHV5 Rootkit [ Not found ] Sin Rootkit [ Not found ] Slapper Worm [ Not found ] Sneakin Rootkit [ Not found ] Suckit Rootkit [ Not found ] SunOS Rootkit [ Not found ] SunOS / NSDAP Rootkit [ Not found ] Superkit Rootkit [ Not found ] TBD (Telnet BackDoor) [ Not found ] TeLeKiT Rootkit [ Not found ] T0rn Rootkit [ Not found ] Trojanit Kit [ Not found ] Tuxtendo Rootkit [ Not found ] URK Rootkit [ Not found ] VcKit Rootkit [ Not found ] Volc Rootkit [ Not found ] X-Org SunOS Rootkit [ Not found ] zaRwT.KiT Rootkit [ Not found ] Performing additional rootkit checks Suckit Rookit additional checks [ OK ] Checking for possible rootkit files and directories [ None found ] Checking for possible rootkit strings [ None found ] Performing malware checks Checking running processes for suspicious files [ None found ] Checking for login backdoors [ None found ] Checking for suspicious directories [ None found ] Checking for sniffer log files [ None found ] Performing trojan specific checks Checking for enabled inetd services [ OK ] Performing Linux specific checks Checking kernel module commands [ OK ] Checking kernel module names [ OK ] [Press <ENTER> to continue] Checking the network... Performing check for backdoor ports Checking for UDP port 2001 [ Not found ] Checking for TCP port 2006 [ Not found ] Checking for TCP port 2128 [ Not found ] Checking for TCP port 14856 [ Not found ] Checking for TCP port 47107 [ Not found ] Checking for TCP port 60922 [ Not found ] Performing checks on the network interfaces Checking for promiscuous interfaces [ None found ] [Press <ENTER> to continue] Checking the local host... Performing system boot checks Checking for local host name [ Found ] Checking for local startup files [ Found ] Checking local startup files for malware [ None found ] Checking system startup files for malware [ None found ] Performing group and account checks Checking for passwd file [ Found ] Checking for root equivalent (UID 0) accounts [ None found ] Checking for passwordless accounts [ None found ] Checking for passwd file changes [ None found ] Checking for group file changes [ None found ] Checking root account shell history files [ OK ] Performing system configuration file checks Checking for SSH configuration file [ Not found ] Checking for running syslog daemon [ Found ] Checking for syslog configuration file [ Found ] Checking if syslog remote logging is allowed [ Not allowed ] Performing filesystem checks Checking /dev for suspicious file types [ Warning ] Checking for hidden files and directories [ Warning ] [Press <ENTER> to continue] Checking application versions... Checking version of Exim MTA [ OK ] Checking version of GnuPG [ OK ] Checking version of OpenSSL [ OK ] System checks summary ===================== File properties checks... Files checked: 123 Suspect files: 0 Rootkit checks... Rootkits checked : 109 Possible rootkits: 0 Applications checks... Applications checked: 3 Suspect applications: 0 The system checks took: 4 minutes and 40 seconds All results have been written to the logfile (/var/log/rkhunter.log) One or more warnings have been found while checking the system. Please check the log file (/var/log/rkhunter.log) rizitis@dell-rizitis:~$

από **taratatzoum** » 20 Δεκ 2008, 16:03

/var/log/rkhunter.log

Κώδικας: Επιλογή όλων: [14:51:57] Running Rootkit Hunter version 1.3.0 on dell-rizitis [14:51:57] [14:51:57] Info: Start date is Σαβ 20 Δεκ 2008 02:51:57 μμ EET [14:51:57] [14:51:57] Checking configuration file and command-line options... [14:51:57] Info: Detected operating system is 'Linux' [14:51:58] Info: Found O/S name: Ubuntu 8.04.1 [14:51:58] Info: Command line is /usr/bin/rkhunter --check [14:51:58] Info: Environment shell is /bin/bash; rkhunter is using dash [14:51:58] Info: Using configuration file '/etc/rkhunter.conf' [14:51:58] Info: Installation directory is '/usr' [14:51:58] Info: Using language 'en' [14:51:58] Info: Using '/var/lib/rkhunter/db' as the database directory [14:51:58] Info: Using '/usr/share/rkhunter/scripts' as the support script directory [14:51:58] Info: Using '/usr/local/sbin /usr/local/bin /usr/sbin /usr/bin /sbin /bin /usr/X11R6/bin /bin /usr/bin /sbin /usr/sbin /usr/local/bin /usr/local/sbin /usr/libexec /usr/local/libexec' as the command directories [14:51:58] Info: Using '/' as the root directory [14:51:58] Info: Using '/var/lib/rkhunter/tmp' as the temporary directory [14:51:58] Info: No mail-on-warning address configured [14:51:58] Info: X will automatically be detected [14:51:59] Info: Using second color set [14:51:59] Info: Found the 'diff' command: /usr/bin/diff [14:51:59] Info: Found the 'file' command: /usr/bin/file [14:51:59] Info: Found the 'find' command: /usr/bin/find [14:51:59] Info: Found the 'ifconfig' command: /sbin/ifconfig [14:51:59] Info: Found the 'ip' command: /sbin/ip [14:51:59] Info: Found the 'ldd' command: /usr/bin/ldd [14:51:59] Info: Found the 'lsattr' command: /usr/bin/lsattr [14:51:59] Info: Found the 'lsmod' command: /sbin/lsmod [14:51:59] Info: Found the 'lsof' command: /usr/bin/lsof [14:52:00] Info: Found the 'mktemp' command: /bin/mktemp [14:52:00] Info: Found the 'netstat' command: /bin/netstat [14:52:00] Info: Found the 'perl' command: /usr/bin/perl [14:52:00] Info: Found the 'ps' command: /bin/ps [14:52:00] Info: Found the 'pwd' command: /bin/pwd [14:52:00] Info: Found the 'readlink' command: /bin/readlink [14:52:00] Info: Found the 'sort' command: /usr/bin/sort [14:52:00] Info: Found the 'stat' command: /usr/bin/stat [14:52:00] Info: Found the 'strings' command: /usr/bin/strings [14:52:00] Info: Found the 'uniq' command: /usr/bin/uniq [14:52:00] Info: System is not using prelinking [14:52:01] Info: Using the '/usr/bin/sha1sum' command for the file hash checks [14:52:01] Info: Stored hash values used hash function '/usr/bin/sha1sum' [14:52:01] Info: Stored hash values did not use a package manager [14:52:01] Info: The hash function field index is set to 1 [14:52:01] Info: No package manager specified: using hash function '/usr/bin/sha1sum' [14:52:01] Info: Previous file attributes were stored [14:52:01] Info: Enabled tests are: all [14:52:01] Info: Disabled tests are: suspscan hidden_procs deleted_files packet_cap_apps [14:52:01] Info: Found ksym file '/proc/kallsyms' [14:52:01] [14:52:01] Checking if the O/S has changed since last time... [14:52:01] Info: Nothing seems to have changed [14:52:02] [14:52:02] Starting system checks... [14:52:02] [14:52:02] Checking system commands... [14:52:02] Info: Starting test name 'system_commands' [14:52:02] [14:52:02] Performing 'strings' command checks [14:52:02] Info: Starting test name 'strings' [14:52:02] Scanning for string /usr/sbin/ntpsx [ OK ] [14:52:02] Scanning for string /usr/lib/.../ls [ OK ] [14:52:02] Scanning for string /usr/lib/.../netstat [ OK ] [14:52:03] Scanning for string /usr/lib/.../lsof [ OK ] [14:52:03] Scanning for string /usr/lib/.../bkit-ssh/bkit-shdcfg [ OK ] [14:52:03] Scanning for string /usr/lib/.../bkit-ssh/bkit-shhk [ OK ] [14:52:03] Scanning for string /usr/lib/.../bkit-ssh/bkit-pw [ OK ] [14:52:03] Scanning for string /usr/lib/.../bkit-ssh/bkit-shrs [ OK ] [14:52:03] Scanning for string /usr/lib/.../uconf.inv [ OK ] [14:52:04] Scanning for string /usr/lib/.../psr [ OK ] [14:52:04] Scanning for string /usr/lib/.../find [ OK ] [14:52:04] Scanning for string /usr/lib/.../pstree [ OK ] [14:52:04] Scanning for string /usr/lib/.../slocate [ OK ] [14:52:04] Scanning for string /usr/lib/.../du [ OK ] [14:52:04] Scanning for string /usr/lib/.../top [ OK ] [14:52:05] Scanning for string /usr/lib/... [ OK ] [14:52:05] Scanning for string /usr/lib/.../bkit-ssh [ OK ] [14:52:05] Scanning for string /usr/lib/.bkit- [ OK ] [14:52:05] Scanning for string /tmp/.bkp [ OK ] [14:52:05] Scanning for string /tmp/.cinik [ OK ] [14:52:06] Scanning for string /tmp/.font-unix/.cinik [ OK ] [14:52:06] Scanning for string /lib/.sso [ OK ] [14:52:06] Scanning for string /lib/.so [ OK ] [14:52:06] Scanning for string /var/run/...dica/clean [ OK ] [14:52:06] Scanning for string /var/run/...dica/xl [ OK ] [14:52:06] Scanning for string /var/run/...dica/xdr [ OK ] [14:52:07] Scanning for string /var/run/...dica/psg [ OK ] [14:52:07] Scanning for string /var/run/...dica/secure [ OK ] [14:52:07] Scanning for string /var/run/...dica/rdx [ OK ] [14:52:07] Scanning for string /var/run/...dica/va [ OK ] [14:52:07] Scanning for string /var/run/...dica/cl.sh [ OK ] [14:52:07] Scanning for string /usr/bin/.etc [ OK ] [14:52:08] Scanning for string /usr/lib/.fx/sched_host.2 [ OK ] [14:52:08] Scanning for string /usr/lib/.fx/random_d.2 [ OK ] [14:52:08] Scanning for string /usr/lib/.fx/set_pid.2 [ OK ] [14:52:08] Scanning for string /usr/lib/.fx/cons.saver [ OK ] [14:52:08] Scanning for string /usr/lib/.fx/adore/adore/adore.ko [ OK ] [14:52:08] Scanning for string /bin/sysback [ OK ] [14:52:09] Scanning for string /usr/local/bin/sysback [ OK ] [14:52:09] Scanning for string /usr/lib/.tbd [ OK ] [14:52:09] Scanning for string /dev/.lib/lib/lib/t0rns [ OK ] [14:52:09] Scanning for string /dev/.lib/lib/lib/du [ OK ] [14:52:09] Scanning for string /dev/.lib/lib/lib/ls [ OK ] [14:52:09] Scanning for string /dev/.lib/lib/lib/t0rnsb [ OK ] [14:52:10] Scanning for string /dev/.lib/lib/lib/ps [ OK ] [14:52:10] Scanning for string /dev/.lib/lib/lib/t0rnp [ OK ] [14:52:10] Scanning for string /dev/.lib/lib/lib/find [ OK ] [14:52:10] Scanning for string /dev/.lib/lib/lib/ifconfig [ OK ] [14:52:11] Scanning for string /dev/.lib/lib/lib/pg [ OK ] [14:52:11] Scanning for string /dev/.lib/lib/lib/ssh.tgz [ OK ] [14:52:11] Scanning for string /dev/.lib/lib/lib/top [ OK ] [14:52:11] Scanning for string /dev/.lib/lib/lib/sz [ OK ] [14:52:11] Scanning for string /dev/.lib/lib/lib/login [ OK ] [14:52:11] Scanning for string /dev/.lib/lib/lib/in.fingerd [ OK ] [14:52:12] Scanning for string /dev/.lib/lib/lib/1i0n.sh [ OK ] [14:52:12] Scanning for string /dev/.lib/lib/lib/pstree [ OK ] [14:52:12] Scanning for string /dev/.lib/lib/lib/in.telnetd [ OK ] [14:52:12] Scanning for string /dev/.lib/lib/lib/mjy [ OK ] [14:52:13] Scanning for string /dev/.lib/lib/lib/sush [ OK ] [14:52:13] Scanning for string /dev/.lib/lib/lib/tfn [ OK ] [14:52:13] Scanning for string /dev/.lib/lib/lib/name [ OK ] [14:52:15] Scanning for string /dev/.lib/lib/lib/getip.sh [ OK ] [14:52:15] Scanning for string /usr/info/.torn/sh* [ OK ] [14:52:15] Scanning for string /usr/src/.puta/.1addr [ OK ] [14:52:15] Scanning for string /usr/src/.puta/.1file [ OK ] [14:52:15] Scanning for string /usr/src/.puta/.1proc [ OK ] [14:52:15] Scanning for string /usr/src/.puta/.1logz [ OK ] [14:52:15] Scanning for string /usr/info/.t0rn [ OK ] [14:52:16] Scanning for string /dev/.lib [ OK ] [14:52:16] Scanning for string /dev/.lib/lib [ OK ] [14:52:16] Scanning for string /dev/.lib/lib/lib [ OK ] [14:52:16] Scanning for string /dev/.lib/lib/lib/dev [ OK ] [14:52:16] Scanning for string /dev/.lib/lib/scan [ OK ] [14:52:16] Scanning for string /usr/src/.puta [ OK ] [14:52:16] Scanning for string /usr/man/man1/man1 [ OK ] [14:52:16] Scanning for string /usr/man/man1/man1/lib [ OK ] [14:52:17] Scanning for string /usr/man/man1/man1/lib/.lib [ OK ] [14:52:17] Scanning for string /usr/man/man1/man1/lib/.lib/.backup [ OK ] [14:52:17] [14:52:17] Performing 'shared libraries' checks [14:52:17] Info: Starting test name 'shared_libs' [14:52:17] Checking for preloading variables [ None found ] [14:52:17] Checking for preload file [ Not found ] [14:52:17] Info: Starting test name 'shared_libs_path' [14:52:17] Checking LD_LIBRARY_PATH variable [ Not found ] [14:52:17] [14:52:17] Performing file properties checks [14:52:17] Info: Starting test name 'properties' [14:52:17] Checking for prerequisites [ OK ] [14:52:18] /bin/bash [ OK ] [14:52:18] /bin/cat [ OK ] [14:52:19] /bin/chmod [ OK ] [14:52:20] /bin/chown [ OK ] [14:52:20] /bin/cp [ OK ] [14:52:20] /bin/date [ OK ] [14:52:20] /bin/df [ OK ] [14:52:21] /bin/dmesg [ OK ] [14:52:21] /bin/echo [ OK ] [14:52:22] /bin/ed [ OK ] [14:52:22] /bin/egrep [ OK ] [14:52:22] Info: Found file '/bin/egrep': it is whitelisted for the 'script replacement' check. [14:52:22] /bin/fgrep [ OK ] [14:52:23] Info: Found file '/bin/fgrep': it is whitelisted for the 'script replacement' check. [14:52:23] /bin/grep [ OK ] [14:52:24] /bin/ip [ OK ] [14:52:25] /bin/kill [ OK ] [14:52:25] /bin/login [ OK ] [14:52:25] /bin/ls [ OK ] [14:52:26] /bin/lsmod [ OK ] [14:52:26] /bin/mktemp [ OK ] [14:52:27] /bin/more [ OK ] [14:52:27] /bin/mount [ OK ] [14:52:28] /bin/mv [ OK ] [14:52:28] /bin/netstat [ OK ] [14:52:28] /bin/ps [ OK ] [14:52:29] /bin/pwd [ OK ] [14:52:29] /bin/readlink [ OK ] [14:52:30] /bin/sed [ OK ] [14:52:30] /bin/sh [ OK ] [14:52:31] /bin/su [ OK ] [14:52:32] /bin/touch [ OK ] [14:52:32] /bin/uname [ OK ] [14:52:33] /bin/which [ OK ] [14:52:33] Info: Found file '/bin/which': it is whitelisted for the 'script replacement' check. [14:52:34] /bin/dash [ OK ] [14:52:34] /usr/bin/awk [ OK ] [14:52:35] /usr/bin/basename [ OK ] [14:52:35] /usr/bin/chattr [ OK ] [14:52:36] /usr/bin/cut [ OK ] [14:52:36] /usr/bin/diff [ OK ] [14:52:36] /usr/bin/dirname [ OK ] [14:52:37] /usr/bin/dpkg [ OK ] [14:52:37] /usr/bin/dpkg-query [ OK ] [14:52:38] /usr/bin/du [ OK ] [14:52:38] /usr/bin/env [ OK ] [14:52:38] /usr/bin/file [ OK ] [14:52:39] /usr/bin/find [ OK ] [14:52:39] /usr/bin/GET [ OK ] [14:52:39] /usr/bin/groups [ OK ] [14:52:40] Info: Found file '/usr/bin/groups': it is whitelisted for the 'script replacement' check. [14:52:40] /usr/bin/head [ OK ] [14:52:40] /usr/bin/id [ OK ] [14:52:41] /usr/bin/killall [ OK ] [14:52:41] /usr/bin/last [ OK ] [14:52:42] /usr/bin/lastlog [ OK ] [14:52:42] /usr/bin/ldd [ OK ] [14:52:42] Info: Found file '/usr/bin/ldd': it is whitelisted for the 'script replacement' check. [14:52:42] /usr/bin/less [ OK ] [14:52:43] /usr/bin/locate [ OK ] [14:52:43] /usr/bin/logger [ OK ] [14:52:44] /usr/bin/lsattr [ OK ] [14:52:44] /usr/bin/lsof [ OK ] [14:52:45] /usr/bin/md5sum [ OK ] [14:52:45] /usr/bin/mlocate [ OK ] [14:52:46] /usr/bin/newgrp [ OK ] [14:52:47] /usr/bin/passwd [ OK ] [14:52:47] /usr/bin/perl [ OK ] [14:52:48] /usr/bin/pstree [ OK ] [14:52:48] /usr/bin/rkhunter [ OK ] [14:52:48] /usr/bin/rpm [ OK ] [14:52:49] /usr/bin/runcon [ OK ] [14:52:49] /usr/bin/sha1sum [ OK ] [14:52:50] /usr/bin/size [ OK ] [14:52:50] /usr/bin/sort [ OK ] [14:52:50] /usr/bin/stat [ OK ] [14:52:51] /usr/bin/strace [ OK ] [14:52:51] /usr/bin/strings [ OK ] [14:52:52] /usr/bin/sudo [ OK ] [14:52:53] /usr/bin/tail [ OK ] [14:52:53] /usr/bin/test [ OK ] [14:52:53] /usr/bin/top [ OK ] [14:52:54] /usr/bin/touch [ OK ] [14:52:54] /usr/bin/tr [ OK ] [14:52:55] /usr/bin/uniq [ OK ] [14:52:55] /usr/bin/users [ OK ] [14:52:56] /usr/bin/vmstat [ OK ] [14:52:56] /usr/bin/w [ OK ] [14:52:57] /usr/bin/watch [ OK ] [14:52:57] /usr/bin/wc [ OK ] [14:52:57] /usr/bin/wget [ OK ] [14:52:58] /usr/bin/whatis [ OK ] [14:52:58] /usr/bin/whereis [ OK ] [14:52:59] /usr/bin/which [ OK ] [14:52:59] /usr/bin/who [ OK ] [14:52:59] /usr/bin/whoami [ OK ] [14:53:00] /usr/bin/mawk [ OK ] [14:53:00] /usr/bin/lwp-request [ OK ] [14:53:01] Info: Found file '/usr/bin/lwp-request': it is whitelisted for the 'script replacement' check. [14:53:01] /usr/bin/w.procps [ OK ] [14:53:02] /sbin/depmod [ OK ] [14:53:02] /sbin/ifconfig [ OK ] [14:53:03] /sbin/ifdown [ OK ] [14:53:03] /sbin/ifup [ OK ] [14:53:03] /sbin/init [ OK ] [14:53:04] /sbin/insmod [ OK ] [14:53:04] /sbin/ip [ OK ] [14:53:05] /sbin/lsmod [ OK ] [14:53:05] /sbin/modinfo [ OK ] [14:53:05] /sbin/modprobe [ OK ] [14:53:06] /sbin/rmmod [ OK ] [14:53:07] /sbin/runlevel [ OK ] [14:53:07] /sbin/sulogin [ OK ] [14:53:08] /sbin/sysctl [ OK ] [14:53:08] /sbin/syslogd [ OK ] [14:53:09] /usr/sbin/adduser [ OK ] [14:53:09] Info: Found file '/usr/sbin/adduser': it is whitelisted for the 'script replacement' check. [14:53:09] /usr/sbin/chroot [ OK ] [14:53:10] /usr/sbin/cron [ OK ] [14:53:10] /usr/sbin/groupadd [ OK ] [14:53:11] /usr/sbin/groupdel [ OK ] [14:53:11] /usr/sbin/groupmod [ OK ] [14:53:12] /usr/sbin/grpck [ OK ] [14:53:12] /usr/sbin/nologin [ OK ] [14:53:13] /usr/sbin/pwck [ OK ] [14:53:13] /usr/sbin/tcpd [ OK ] [14:53:14] /usr/sbin/useradd [ OK ] [14:53:15] /usr/sbin/userdel [ OK ] [14:53:15] /usr/sbin/usermod [ OK ] [14:53:15] /usr/sbin/vipw [ OK ] [14:53:40] [14:53:40] Checking for rootkits... [14:53:40] Info: Starting test name 'rootkits' [14:53:40] [14:53:40] Performing check of known rootkit files and directories [14:53:40] Info: Starting test name 'known_rkts' [14:53:40] [14:53:40] Checking for 55808 Trojan - Variant A... [14:53:40] Checking for file '/tmp/.../r' [ Not found ] [14:53:41] Checking for file '/tmp/.../a' [ Not found ] [14:53:41] 55808 Trojan - Variant A [ Not found ] [14:53:41] [14:53:41] Checking for ADM Worm... [14:53:41] Checking for string 'w0rm' [ Not found ] [14:53:41] ADM Worm [ Not found ] [14:53:41] [14:53:41] Checking for AjaKit Rootkit... [14:53:41] Checking for file '/dev/tux/.addr' [ Not found ] [14:53:41] Checking for file '/dev/tux/.proc' [ Not found ] [14:53:41] Checking for file '/dev/tux/.file' [ Not found ] [14:53:41] Checking for file '/lib/.libgh-gh/cleaner' [ Not found ] [14:53:41] Checking for file '/lib/.libgh-gh/Patch/patch' [ Not found ] [14:53:42] Checking for file '/lib/.libgh-gh/sb0k' [ Not found ] [14:53:42] Checking for directory '/dev/tux' [ Not found ] [14:53:42] Checking for directory '/lib/.libgh-gh' [ Not found ] [14:53:42] AjaKit Rootkit [ Not found ] [14:53:42] [14:53:42] Checking for aPa Kit... [14:53:42] Checking for file '/usr/share/.aPa' [ Not found ] [14:53:42] aPa Kit [ Not found ] [14:53:42] [14:53:42] Checking for Apache Worm... [14:53:42] Checking for file '/bin/.log' [ Not found ] [14:53:42] Apache Worm [ Not found ] [14:53:43] [14:53:43] Checking for Ambient (ark) Rootkit... [14:53:43] Checking for file '/usr/lib/.ark?' [ Not found ] [14:53:43] Checking for file '/dev/ptyxx/.log' [ Not found ] [14:53:43] Checking for file '/dev/ptyxx/.file' [ Not found ] [14:53:43] Checking for directory '/dev/ptyxx' [ Not found ] [14:53:43] Ambient (ark) Rootkit [ Not found ] [14:53:43] [14:53:43] Checking for Balaur Rootkit... [14:53:43] Checking for file '/usr/lib/liblog.o' [ Not found ] [14:53:43] Checking for directory '/usr/lib/.kinetic' [ Not found ] [14:53:44] Checking for directory '/usr/lib/.egcs' [ Not found ] [14:53:44] Checking for directory '/usr/lib/.wormie' [ Not found ] [14:53:44] Balaur Rootkit [ Not found ] [14:53:44] [14:53:44] Checking for BeastKit Rootkit... [14:53:44] Checking for file '/usr/sbin/arobia' [ Not found ] [14:53:44] Checking for file '/usr/sbin/idrun' [ Not found ] [14:53:44] Checking for file '/usr/lib/elm/arobia/elm' [ Not found ] [14:53:44] Checking for file '/usr/lib/elm/arobia/elm/hk' [ Not found ] [14:53:44] Checking for file '/usr/lib/elm/arobia/elm/hk.pub' [ Not found ] [14:53:45] Checking for file '/usr/lib/elm/arobia/elm/sc' [ Not found ] [14:53:45] Checking for file '/usr/lib/elm/arobia/elm/sd.pp' [ Not found ] [14:53:45] Checking for file '/usr/lib/elm/arobia/elm/sdco' [ Not found ] [14:53:45] Checking for file '/usr/lib/elm/arobia/elm/srsd' [ Not found ] [14:53:45] Checking for directory '/lib/ldd.so/bktools' [ Not found ] [14:53:45] BeastKit Rootkit [ Not found ] [14:53:45] [14:53:45] Checking for beX2 Rootkit... [14:53:45] Checking for directory '/usr/include/bex' [ Not found ] [14:53:45] beX2 Rootkit [ Not found ] [14:53:45] [14:53:45] Checking for BOBKit Rootkit... [14:53:45] Checking for file '/usr/sbin/ntpsx' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../ls' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../netstat' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../lsof' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../bkit-ssh/bkit-shdcfg' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../bkit-ssh/bkit-shhk' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../bkit-ssh/bkit-pw' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../bkit-ssh/bkit-shrs' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../uconf.inv' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../psr' [ Not found ] [14:53:46] Checking for file '/usr/lib/.../find' [ Not found ] [14:53:47] Checking for file '/usr/lib/.../pstree' [ Not found ] [14:53:47] Checking for file '/usr/lib/.../slocate' [ Not found ] [14:53:47] Checking for file '/usr/lib/.../du' [ Not found ] [14:53:47] Checking for file '/usr/lib/.../top' [ Not found ] [14:53:47] Checking for directory '/usr/lib/...' [ Not found ] [14:53:47] Checking for directory '/usr/lib/.../bkit-ssh' [ Not found ] [14:53:47] Checking for directory '/usr/lib/.bkit-' [ Not found ] [14:53:47] Checking for directory '/tmp/.bkp' [ Not found ] [14:53:47] BOBKit Rootkit [ Not found ] [14:53:48] [14:53:48] Checking for CiNIK Worm (Slapper.B variant)... [14:53:48] Checking for file '/tmp/.cinik' [ Not found ] [14:53:48] Checking for directory '/tmp/.font-unix/.cinik' [ Not found ] [14:53:48] CiNIK Worm (Slapper.B variant) [ Not found ] [14:53:48] [14:53:48] Checking for Danny-Boy's Abuse Kit... [14:53:48] Checking for file '/dev/mdev' [ Not found ] [14:53:48] Checking for file '/usr/lib/libX.a' [ Not found ] [14:53:48] Danny-Boy's Abuse Kit [ Not found ] [14:53:48] [14:53:48] Checking for Devil RootKit... [14:53:48] Checking for file '/var/lib/games/.src' [ Not found ] [14:53:49] Checking for file '/dev/dsx' [ Not found ] [14:53:49] Checking for file '/dev/caca' [ Not found ] [14:53:49] Devil RootKit [ Not found ] [14:53:49] [14:53:49] Checking for Dica-Kit Rootkit... [14:53:49] Checking for file '/lib/.sso' [ Not found ] [14:53:49] Checking for file '/lib/.so' [ Not found ] [14:53:49] Checking for file '/var/run/...dica/clean' [ Not found ] [14:53:49] Checking for file '/var/run/...dica/xl' [ Not found ] [14:53:49] Checking for file '/var/run/...dica/xdr' [ Not found ] [14:53:50] Checking for file '/var/run/...dica/psg' [ Not found ] [14:53:50] Checking for file '/var/run/...dica/secure' [ Not found ] [14:53:50] Checking for file '/var/run/...dica/rdx' [ Not found ] [14:53:50] Checking for file '/var/run/...dica/va' [ Not found ] [14:53:50] Checking for file '/var/run/...dica/cl.sh' [ Not found ] [14:53:50] Checking for file '/usr/bin/.etc' [ Not found ] [14:53:50] Checking for directory '/var/run/...dica' [ Not found ] [14:53:50] Checking for directory '/var/run/...dica/mh' [ Not found ] [14:53:50] Checking for directory '/var/run/...dica/scan' [ Not found ] [14:53:50] Dica-Kit Rootkit [ Not found ] [14:53:51] [14:53:51] Checking for Dreams Rootkit... [14:53:51] Checking for file '/dev/ttyoa' [ Not found ] [14:53:51] Checking for file '/dev/ttyof' [ Not found ] [14:53:51] Checking for file '/dev/ttyop' [ Not found ] [14:53:51] Checking for file '/usr/bin/sense' [ Not found ] [14:53:51] Checking for file '/usr/bin/sl2' [ Not found ] [14:53:51] Checking for file '/usr/bin/logclear' [ Not found ] [14:53:51] Checking for file '/usr/bin/(swapd)' [ Not found ] [14:53:51] Checking for file '/usr/bin/snfs' [ Not found ] [14:53:51] Checking for file '/usr/lib/libsss' [ Not found ] [14:53:52] Checking for directory '/dev/ida/.hpd' [ Not found ] [14:53:52] Dreams Rootkit [ Not found ] [14:53:52] [14:53:52] Checking for Duarawkz Rootkit... [14:53:52] Checking for file '/usr/bin/duarawkz/loginpass' [ Not found ] [14:53:52] Checking for directory '/usr/bin/duarawkz' [ Not found ] [14:53:52] Duarawkz Rootkit [ Not found ] [14:53:52] [14:53:52] Checking for Enye LKM... [14:53:52] Checking for file '/etc/.enyelkmHIDE^IT.ko' [ Not found ] [14:53:52] Enye LKM [ Not found ] [14:53:52] [14:53:52] Checking for Flea Linux Rootkit... [14:53:52] Checking for file '/etc/ld.so.hash' [ Not found ] [14:53:52] Checking for file '/lib/security/.config/ssh/ssh_host_key' [ Not found ] [14:53:53] Checking for file '/lib/security/.config/ssh/ssh_host_key.pub' [ Not found ] [14:53:53] Checking for file '/lib/security/.config/ssh/ssh_random_seed' [ Not found ] [14:53:53] Checking for file '/usr/bin/ssh2d' [ Not found ] [14:53:53] Checking for file '/usr/lib/ldlibns.so' [ Not found ] [14:53:53] Checking for file '/usr/lib/ldlibpst.so' [ Not found ] [14:53:53] Checking for file '/usr/lib/ldlibdu.so' [ Not found ] [14:53:53] Checking for file '/usr/lib/ldlibct.so' [ Not found ] [14:53:53] Checking for directory '/lib/security/.config/ssh' [ Not found ] [14:53:53] Checking for directory '/dev/..0' [ Not found ] [14:53:54] Checking for directory '/dev/..0/backup' [ Not found ] [14:53:54] Flea Linux Rootkit [ Not found ] [14:53:54] [14:53:54] Checking for FreeBSD Rootkit... [14:53:54] Checking for file '/usr/lib/.fx/sched_host.2' [ Not found ] [14:53:54] Checking for file '/usr/lib/.fx/random_d.2' [ Not found ] [14:53:54] Checking for file '/usr/lib/.fx/set_pid.2' [ Not found ] [14:53:54] Checking for file '/usr/lib/.fx/cons.saver' [ Not found ] [14:53:54] Checking for file '/usr/lib/.fx/adore/adore/adore.ko' [ Not found ] [14:53:54] Checking for file '/bin/sysback' [ Not found ] [14:53:54] Checking for file '/usr/local/bin/sysback' [ Not found ] [14:53:55] Checking for directory '/usr/lib/.fx' [ Not found ] [14:53:55] Checking for directory '/usr/lib/.fx/adore' [ Not found ] [14:53:55] FreeBSD Rootkit [ Not found ] [14:53:55] [14:53:55] Checking for f***`it Rootkit... [14:53:55] Checking for file '/dev/proc/fuckit/hax0r' [ Not found ] [14:53:55] Checking for file '/dev/proc/fuckit/hax0rshell' [ Not found ] [14:53:55] Checking for file '/dev/proc/fuckit/config/lports' [ Not found ] [14:53:55] Checking for file '/dev/proc/fuckit/config/rports' [ Not found ] [14:53:55] Checking for file '/dev/proc/fuckit/config/rkconf' [ Not found ] [14:53:56] Checking for file '/dev/proc/fuckit/config/password' [ Not found ] [14:53:56] Checking for file '/dev/proc/fuckit/config/progs' [ Not found ] [14:53:56] Checking for file '/dev/proc/system-bins/init' [ Not found ] [14:53:56] f***`it Rootkit [ Not found ] [14:53:56] [14:53:56] Checking for GasKit Rootkit... [14:53:56] Checking for file '/dev/dev/gaskit/sshd/sshdd' [ Not found ] [14:53:56] Checking for directory '/dev/dev' [ Not found ] [14:53:56] Checking for directory '/dev/dev/gaskit' [ Not found ] [14:53:56] Checking for directory '/dev/dev/gaskit/sshd' [ Not found ] [14:53:57] GasKit Rootkit [ Not found ] [14:53:57] [14:53:57] Checking for Heroin LKM... [14:53:57] Checking for kernel symbol 'heroin' [ Not found ] [14:53:57] Heroin LKM [ Not found ] [14:53:57] [14:53:57] Checking for HjC Kit... [14:53:57] Checking for directory '/dev/.hijackerz' [ Not found ] [14:53:57] HjC Kit [ Not found ] [14:53:57] [14:53:57] Checking for ignoKit Rootkit... [14:53:57] Checking for file '/lib/defs/p' [ Not found ] [14:53:57] Checking for file '/lib/defs/q' [ Not found ] [14:53:58] Checking for file '/lib/defs/r' [ Not found ] [14:53:58] Checking for file '/lib/defs/s' [ Not found ] [14:53:58] Checking for file '/lib/defs/t' [ Not found ] [14:53:58] Checking for file '/usr/lib/defs/p' [ Not found ] [14:53:58] Checking for file '/usr/lib/defs/q' [ Not found ] [14:53:58] Checking for file '/usr/lib/defs/r' [ Not found ] [14:53:58] Checking for file '/usr/lib/defs/s' [ Not found ] [14:53:58] Checking for file '/usr/lib/defs/t' [ Not found ] [14:53:58] Checking for file '/usr/lib/.libigno/pkunsec' [ Not found ] [14:53:58] Checking for file '/usr/lib/.libigno/.igno/psybnc/psybnc' [ Not found ] [14:53:59] Checking for directory '/usr/lib/.libigno' [ Not found ] [14:53:59] Checking for directory '/usr/lib/.libigno/.igno' [ Not found ] [14:53:59] ignoKit Rootkit [ Not found ] [14:53:59] [14:53:59] Checking for ImperalsS-FBRK Rootkit... [14:53:59] Checking for directory '/dev/fd/.88' [ Not found ] [14:53:59] Checking for directory '/dev/fd/.99' [ Not found ] [14:53:59] ImperalsS-FBRK Rootkit [ Not found ] [14:53:59] [14:53:59] Checking for Irix Rootkit... [14:53:59] Checking for directory '/dev/pts/01' [ Not found ] [14:54:00] Checking for directory '/dev/pts/01/backup' [ Not found ] [14:54:00] Checking for directory '/dev/pts/01/etc' [ Not found ] [14:54:00] Checking for directory '/dev/pts/01/tmp' [ Not found ] [14:54:00] Irix Rootkit [ Not found ] [14:54:00] [14:54:00] Checking for Kitko Rootkit... [14:54:00] Checking for directory '/usr/src/redhat/SRPMS/...' [ Not found ] [14:54:00] Kitko Rootkit [ Not found ] [14:54:00] [14:54:00] Checking for Knark Rootkit... [14:54:00] Checking for file '/proc/knark/pids' [ Not found ] [14:54:00] Checking for directory '/proc/knark' [ Not found ] [14:54:01] Knark Rootkit [ Not found ] [14:54:01] [14:54:01] Checking for Li0n Worm... [14:54:01] Checking for file '/bin/in.telnetd' [ Not found ] [14:54:01] Checking for file '/bin/mjy' [ Not found ] [14:54:01] Checking for file '/usr/man/man1/man1/lib/.lib/mjy' [ Not found ] [14:54:01] Checking for file '/usr/man/man1/man1/lib/.lib/in.telnetd' [ Not found ] [14:54:01] Checking for file '/usr/man/man1/man1/lib/.lib/.x' [ Not found ] [14:54:01] Checking for file '/dev/.lib/lib/scan/1i0n.sh' [ Not found ] [14:54:01] Checking for file '/dev/.lib/lib/scan/hack.sh' [ Not found ] [14:54:01] Checking for file '/dev/.lib/lib/scan/bind' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/scan/randb' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/scan/scan.sh' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/scan/pscan' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/scan/star.sh' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/scan/bindx.sh' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/scan/bindname.log' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/1i0n.sh' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/lib/netstat' [ Not found ] [14:54:02] Checking for file '/dev/.lib/lib/lib/dev/.1addr' [ Not found ] [14:54:03] Checking for file '/dev/.lib/lib/lib/dev/.1logz' [ Not found ] [14:54:03] Checking for file '/dev/.lib/lib/lib/dev/.1proc' [ Not found ] [14:54:03] Checking for file '/dev/.lib/lib/lib/dev/.1file' [ Not found ] [14:54:03] Li0n Worm [ Not found ] [14:54:03] [14:54:03] Checking for Lockit / LJK2 Rootkit... [14:54:03] Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_config' [ Not found ] [14:54:03] Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_host_key' [ Not found ] [14:54:03] Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_host_key.pub' [ Not found ] [14:54:03] Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_random_seed*' [ Not found ] [14:54:03] Checking for file '/usr/lib/libmen.oo/.LJK2/sshd_config' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backdoor/RK1bd' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/du' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ifconfig' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/inetd.conf' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/locate' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/login' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ls' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/netstat' [ Not found ] [14:54:04] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ps' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/pstree' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/rc.sysinit' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/syslogd' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/tcpd' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/top' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/clean/RK1sauber' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/clean/RK1wted' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/hack/RK1parser' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/hack/RK1sniff' [ Not found ] [14:54:05] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1addr' [ Not found ] [14:54:06] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1dir' [ Not found ] [14:54:06] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1log' [ Not found ] [14:54:06] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1proc' [ Not found ] [14:54:06] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/RK1phidemod.c' [ Not found ] [14:54:06] Checking for file '/usr/lib/libmen.oo/.LJK2/modules/README.modules' [ Not found ] [14:54:06] Checking for file '/usr/lib/libmen.oo/.LJK2/modules/RK1hidem.c' [ Not found ] [14:54:06] Checking for file '/usr/lib/libmen.oo/.LJK2/modules/RK1phide' [ Not found ] [14:54:06] Checking for file '/usr/lib/libmen.oo/.LJK2/sshconfig/RK1ssh' [ Not found ] [14:54:06] Checking for directory '/usr/lib/libmen.oo/.LJK2' [ Not found ] [14:54:07] Lockit / LJK2 Rootkit [ Not found ] [14:54:07] [14:54:07] Checking for Mood-NT Rootkit... [14:54:07] Checking for file '/sbin/init__mood-nt-_-_cthulhu' [ Not found ] [14:54:07] Checking for file '/_cthulhu/mood-nt.init' [ Not found ] [14:54:07] Checking for file '/_cthulhu/mood-nt.conf' [ Not found ] [14:54:07] Checking for file '/_cthulhu/mood-nt.sniff' [ Not found ] [14:54:07] Checking for directory '/_cthulhu' [ Not found ] [14:54:07] Mood-NT Rootkit [ Not found ] [14:54:07] [14:54:07] Checking for MRK Rootkit... [14:54:08] Checking for file '/dev/ida/.inet/pid' [ Not found ] [14:54:08] Checking for file '/dev/ida/.inet/ssh_host_key' [ Not found ] [14:54:08] Checking for file '/dev/ida/.inet/ssh_random_seed' [ Not found ] [14:54:08] Checking for file '/dev/ida/.inet/tcp.log' [ Not found ] [14:54:08] Checking for directory '/dev/ida/.inet' [ Not found ] [14:54:08] Checking for directory '/var/spool/cron/.sh' [ Not found ] [14:54:08] MRK Rootkit [ Not found ] [14:54:08] [14:54:08] Checking for Ni0 Rootkit... [14:54:08] Checking for file '/var/lock/subsys/...datafile.../...net...' [ Not found ] [14:54:08] Checking for file '/var/lock/subsys/...datafile.../...port...' [ Not found ] [14:54:08] Checking for file '/var/lock/subsys/...datafile.../...ps...' [ Not found ] [14:54:09] Checking for file '/var/lock/subsys/...datafile.../...file...' [ Not found ] [14:54:09] Checking for directory '/tmp/waza' [ Not found ] [14:54:09] Checking for directory '/var/lock/subsys/...datafile...' [ Not found ] [14:54:09] Checking for directory '/usr/sbin/es' [ Not found ] [14:54:09] Ni0 Rootkit [ Not found ]

από **taratatzoum** » 20 Δεκ 2008, 16:03

Κώδικας: Επιλογή όλων: [14:54:09] [14:54:09] Checking for Ohhara Rootkit... [14:54:09] Checking for file '/var/lock/subsys/...datafile.../...datafile.../in.smbd.log' [ Not found ] [14:54:09] Checking for directory '/var/lock/subsys/...datafile...' [ Not found ] [14:54:09] Checking for directory '/var/lock/subsys/...datafile.../...datafile...' [ Not found ] [14:54:09] Checking for directory '/var/lock/subsys/...datafile.../...datafile.../bin' [ Not found ] [14:54:10] Checking for directory '/var/lock/subsys/...datafile.../...datafile.../usr/bin' [ Not found ] [14:54:10] Checking for directory '/var/lock/subsys/...datafile.../...datafile.../usr/sbin' [ Not found ] [14:54:10] Checking for directory '/var/lock/subsys/...datafile.../...datafile.../lib/security' [ Not found ] [14:54:10] Ohhara Rootkit [ Not found ] [14:54:10] [14:54:10] Checking for Optic Kit (Tux) Worm... [14:54:10] Checking for directory '/dev/tux' [ Not found ] [14:54:10] Checking for directory '/usr/bin/xchk' [ Not found ] [14:54:10] Checking for directory '/usr/bin/xsf' [ Not found ] [14:54:10] Checking for directory '/usr/bin/ssh2d' [ Not found ] [14:54:11] Optic Kit (Tux) Worm [ Not found ] [14:54:11] [14:54:11] Checking for Oz Rootkit... [14:54:11] Checking for file '/dev/.oz/.nap/rkit/terror' [ Not found ] [14:54:11] Checking for directory '/dev/.oz' [ Not found ] [14:54:11] Oz Rootkit [ Not found ] [14:54:11] [14:54:11] Checking for Phalanx Rootkit... [14:54:11] Checking for file '/usr/share/.home.ph1/cb' [ Not found ] [14:54:11] Checking for file '/etc/host.ph1' [ Not found ] [14:54:11] Checking for file '/bin/host.ph1' [ Not found ] [14:54:12] Checking for file '/usr/share/.home.ph1/phalanx' [ Not found ] [14:54:12] Checking for directory '/usr/share/.home.ph1' [ Not found ] [14:54:12] Phalanx Rootkit [ Not found ] [14:54:12] [14:54:12] Checking for Phalanx Rootkit (strings)... [14:54:12] Checking for string 'phalanx' [ Not found ] [14:54:12] Phalanx Rootkit (strings) [ Not found ] [14:54:12] [14:54:12] Checking for Portacelo Rootkit... [14:54:12] Checking for file '/var/lib/.../.ak' [ Not found ] [14:54:12] Checking for file '/var/lib/.../.hk' [ Not found ] [14:54:12] Checking for file '/var/lib/.../.rs' [ Not found ] [14:54:12] Checking for file '/var/lib/.../.p' [ Not found ] [14:54:13] Checking for file '/var/lib/.../getty' [ Not found ] [14:54:13] Checking for file '/var/lib/.../lkt.o' [ Not found ] [14:54:13] Checking for file '/var/lib/.../show' [ Not found ] [14:54:13] Checking for file '/var/lib/.../nlkt.o' [ Not found ] [14:54:13] Checking for file '/var/lib/.../ssshrc' [ Not found ] [14:54:13] Checking for file '/var/lib/.../sssh_equiv' [ Not found ] [14:54:13] Checking for file '/var/lib/.../sssh_known_hosts' [ Not found ] [14:54:13] Checking for file '/var/lib/.../sssh_pid' [ Not found ] [14:54:13] Checking for file '~/.sssh/known_hosts' [ Not found ] [14:54:14] Portacelo Rootkit [ Not found ] [14:54:14] [14:54:14] Checking for R3dstorm Toolkit... [14:54:14] Checking for file '/var/log/tk02/see_all' [ Not found ] [14:54:14] Checking for file '/bin/.../sshd/sbin/sshd1' [ Not found ] [14:54:14] Checking for file '/bin/.../hate/sk' [ Not found ] [14:54:14] Checking for file '/bin/.../see_all' [ Not found ] [14:54:14] Checking for directory '/var/log/tk02' [ Not found ] [14:54:14] Checking for directory '/var/log/tk02/old' [ Not found ] [14:54:14] Checking for directory '/bin/...' [ Not found ] [14:54:15] R3dstorm Toolkit [ Not found ] [14:54:15] [14:54:15] Checking for RH-Sharpe's Rootkit... [14:54:15] Checking for file '/bin/lps' [ Not found ] [14:54:15] Checking for file '/usr/bin/lpstree' [ Not found ] [14:54:15] Checking for file '/usr/bin/ltop' [ Not found ] [14:54:15] Checking for file '/usr/bin/lkillall' [ Not found ] [14:54:15] Checking for file '/usr/bin/ldu' [ Not found ] [14:54:15] Checking for file '/usr/bin/lnetstat' [ Not found ] [14:54:15] Checking for file '/usr/bin/wp' [ Not found ] [14:54:15] Checking for file '/usr/bin/shad' [ Not found ] [14:54:15] Checking for file '/usr/bin/vadim' [ Not found ] [14:54:16] Checking for file '/usr/bin/slice' [ Not found ] [14:54:16] Checking for file '/usr/bin/cleaner' [ Not found ] [14:54:16] Checking for file '/usr/include/rpcsvc/du' [ Not found ] [14:54:16] RH-Sharpe's Rootkit [ Not found ] [14:54:16] [14:54:16] Checking for RSHA's Rootkit... [14:54:16] Checking for file '/bin/kr4p' [ Not found ] [14:54:16] Checking for file '/usr/bin/n3tstat' [ Not found ] [14:54:16] Checking for file '/usr/bin/chsh2' [ Not found ] [14:54:16] Checking for file '/usr/bin/slice2' [ Not found ] [14:54:17] Checking for file '/usr/src/linux/arch/alpha/lib/.lib/.1proc' [ Not found ] [14:54:17] Checking for file '/etc/rc.d/arch/alpha/lib/.lib/.1addr' [ Not found ] [14:54:17] Checking for directory '/etc/rc.d/rsha' [ Not found ] [14:54:17] Checking for directory '/etc/rc.d/arch/alpha/lib/.lib' [ Not found ] [14:54:17] RSHA's Rootkit [ Not found ] [14:54:17] [14:54:17] Checking for Scalper Worm... [14:54:17] Checking for file '/tmp/.a' [ Not found ] [14:54:17] Checking for file '/tmp/.uua' [ Not found ] [14:54:17] Scalper Worm [ Not found ] [14:54:17] [14:54:17] Checking for Sebek LKM... [14:54:18] Checking for kernel symbol 'adore or sebek' [ Not found ] [14:54:18] Sebek LKM [ Not found ] [14:54:18] [14:54:18] Checking for Shutdown Rootkit... [14:54:18] Checking for file '/usr/man/man5/.. /.dir/scannah/asus' [ Not found ] [14:54:18] Checking for file '/usr/man/man5/.. /.dir/see' [ Not found ] [14:54:18] Checking for file '/usr/man/man5/.. /.dir/nscd' [ Not found ] [14:54:19] Checking for file '/usr/man/man5/.. /.dir/alpd' [ Not found ] [14:54:19] Checking for file '/etc/rc.d/rc.local ' [ Not found ] [14:54:19] Checking for directory '/usr/man/man5/.. /.dir' [ Not found ] [14:54:19] Checking for directory '/usr/man/man5/.. /.dir/scannah' [ Not found ] [14:54:19] Checking for directory '/etc/rc.d/rc0.d/.. /.dir' [ Not found ] [14:54:19] Shutdown Rootkit [ Not found ] [14:54:19] [14:54:19] Checking for SHV4 Rootkit... [14:54:19] Checking for file '/etc/ld.so.hash' [ Not found ] [14:54:19] Checking for file '/lib/libext-2.so.7' [ Not found ] [14:54:19] Checking for file '/lib/lidps1.so' [ Not found ] [14:54:20] Checking for file '/usr/sbin/xntps' [ Not found ] [14:54:20] Checking for directory '/lib/security/.config' [ Not found ] [14:54:20] Checking for directory '/lib/security/.config/ssh' [ Not found ] [14:54:20] SHV4 Rootkit [ Not found ] [14:54:20] [14:54:20] Checking for SHV5 Rootkit... [14:54:20] Checking for file '/etc/sh.conf' [ Not found ] [14:54:20] Checking for file '/dev/srd0' [ Not found ] [14:54:20] Checking for directory '/usr/lib/libsh' [ Not found ] [14:54:20] SHV5 Rootkit [ Not found ] [14:54:21] [14:54:21] Checking for Sin Rootkit... [14:54:21] Checking for file '/dev/.haos/haos1/.f/Denyed' [ Not found ] [14:54:21] Checking for file '/dev/ttyoa' [ Not found ] [14:54:21] Checking for file '/dev/ttyof' [ Not found ] [14:54:21] Checking for file '/dev/ttyop' [ Not found ] [14:54:21] Checking for file '/dev/ttyos' [ Not found ] [14:54:21] Checking for file '/usr/lib/.lib' [ Not found ] [14:54:21] Checking for file '/usr/lib/sn/.X' [ Not found ] [14:54:21] Checking for file '/usr/lib/sn/.sys' [ Not found ] [14:54:21] Checking for file '/usr/lib/ld/.X' [ Not found ] [14:54:22] Checking for file '/usr/man/man1/...' [ Not found ] [14:54:22] Checking for file '/usr/man/man1/.../.m' [ Not found ] [14:54:22] Checking for file '/usr/man/man1/.../.w' [ Not found ] [14:54:22] Checking for directory '/usr/lib/sn' [ Not found ] [14:54:22] Checking for directory '/usr/lib/man1/...' [ Not found ] [14:54:22] Checking for directory '/dev/.haos' [ Not found ] [14:54:22] Sin Rootkit [ Not found ] [14:54:22] [14:54:22] Checking for Slapper Worm... [14:54:22] Checking for file '/tmp/.bugtraq' [ Not found ] [14:54:22] Checking for file '/tmp/.uubugtraq' [ Not found ] [14:54:23] Checking for file '/tmp/.bugtraq.c' [ Not found ] [14:54:23] Checking for file '/tmp/httpd' [ Not found ] [14:54:23] Checking for file '/tmp/.unlock' [ Not found ] [14:54:23] Checking for file '/tmp/update' [ Not found ] [14:54:23] Checking for file '/tmp/.cinik' [ Not found ] [14:54:23] Checking for file '/tmp/.b' [ Not found ] [14:54:23] Slapper Worm [ Not found ] [14:54:23] [14:54:23] Checking for Sneakin Rootkit... [14:54:23] Checking for directory '/tmp/.X11-unix/.../rk' [ Not found ] [14:54:24] Sneakin Rootkit [ Not found ] [14:54:24] [14:54:24] Checking for Suckit Rootkit... [14:54:24] Checking for file '/sbin/initsk12' [ Not found ] [14:54:24] Checking for file '/sbin/initxrk' [ Not found ] [14:54:24] Checking for file '/usr/bin/null' [ Not found ] [14:54:24] Checking for file '/usr/share/locale/sk/.sk12/sk' [ Not found ] [14:54:24] Checking for file '/etc/rc.d/rc0.d/S23kmdac' [ Not found ] [14:54:24] Checking for file '/etc/rc.d/rc1.d/S23kmdac' [ Not found ] [14:54:24] Checking for file '/etc/rc.d/rc2.d/S23kmdac' [ Not found ] [14:54:25] Checking for file '/etc/rc.d/rc3.d/S23kmdac' [ Not found ] [14:54:25] Checking for file '/etc/rc.d/rc4.d/S23kmdac' [ Not found ] [14:54:25] Checking for file '/etc/rc.d/rc5.d/S23kmdac' [ Not found ] [14:54:25] Checking for file '/etc/rc.d/rc6.d/S23kmdac' [ Not found ] [14:54:25] Checking for directory '/dev/sdhu0/tehdrakg' [ Not found ] [14:54:25] Checking for directory '/etc/.MG' [ Not found ] [14:54:25] Checking for directory '/usr/share/locale/sk/.sk12' [ Not found ] [14:54:25] Checking for directory '/usr/lib/perl5/site_perl/i386-linux/auto/TimeDate/.packlist' [ Not found ] [14:54:26] Suckit Rootkit [ Not found ] [14:54:26] [14:54:26] Checking for SunOS Rootkit... [14:54:26] Checking for file '/etc/ld.so.hash' [ Not found ] [14:54:26] Checking for file '/lib/libext-2.so.7' [ Not found ] [14:54:26] Checking for file '/usr/bin/ssh2d' [ Not found ] [14:54:26] Checking for file '/bin/xlogin' [ Not found ] [14:54:26] Checking for file '/usr/lib/crth.o' [ Not found ] [14:54:26] Checking for file '/usr/lib/crtz.o' [ Not found ] [14:54:26] Checking for file '/sbin/login' [ Not found ] [14:54:26] Checking for file '/lib/security/.config/sn' [ Not found ] [14:54:26] Checking for file '/lib/security/.config/lpsched' [ Not found ] [14:54:27] Checking for file '/dev/kmod' [ Not found ] [14:54:27] Checking for file '/dev/dos' [ Not found ] [14:54:27] SunOS Rootkit [ Not found ] [14:54:27] [14:54:27] Checking for SunOS / NSDAP Rootkit... [14:54:27] Checking for file '/usr/lib/vold/nsdap/.kit' [ Not found ] [14:54:27] Checking for file '/usr/lib/vold/nsdap/defines' [ Not found ] [14:54:27] Checking for file '/usr/lib/vold/nsdap/patcher' [ Not found ] [14:54:27] Checking for file '/usr/lib/vold/nsdap/pg' [ Not found ] [14:54:27] Checking for file '/usr/lib/vold/nsdap/cleaner' [ Not found ] [14:54:28] Checking for file '/usr/lib/vold/nsdap/utime' [ Not found ] [14:54:28] Checking for file '/usr/lib/vold/nsdap/crypt' [ Not found ] [14:54:28] Checking for file '/usr/lib/vold/nsdap/findkit' [ Not found ] [14:54:28] Checking for file '/usr/lib/vold/nsdap/sn2' [ Not found ] [14:54:28] Checking for file '/usr/lib/vold/nsdap/sniffload' [ Not found ] [14:54:28] Checking for file '/usr/lib/vold/nsdap/runsniff' [ Not found ] [14:54:28] Checking for file '/usr/lib/lpset' [ Not found ] [14:54:28] Checking for directory '/usr/lib/vold/nsdap' [ Not found ] [14:54:29] SunOS / NSDAP Rootkit [ Not found ] [14:54:29] [14:54:29] Checking for Superkit Rootkit... [14:54:29] Checking for file '/usr/man/.sman/sk' [ Not found ] [14:54:29] Superkit Rootkit [ Not found ] [14:54:29] [14:54:29] Checking for TBD (Telnet BackDoor)... [14:54:29] Checking for file '/usr/lib/.tbd' [ Not found ] [14:54:29] TBD (Telnet BackDoor) [ Not found ] [14:54:29] [14:54:29] Checking for TeLeKiT Rootkit... [14:54:29] Checking for file '/usr/man/man3/.../TeLeKiT/bin/sniff' [ Not found ] [14:54:29] Checking for file '/usr/man/man3/.../TeLeKiT/bin/telnetd' [ Not found ] [14:54:30] Checking for file '/usr/man/man3/.../TeLeKiT/bin/teleulo' [ Not found ] [14:54:30] Checking for file '/usr/man/man3/.../cl' [ Not found ] [14:54:30] Checking for file '/dev/ptyr' [ Not found ] [14:54:30] Checking for file '/dev/ptyp' [ Not found ] [14:54:30] Checking for file '/dev/ptyq' [ Not found ] [14:54:30] Checking for file '/dev/hda06' [ Not found ] [14:54:30] Checking for file '/usr/info/libc1.so' [ Not found ] [14:54:30] Checking for directory '/usr/man/man3/...' [ Not found ] [14:54:30] Checking for directory '/usr/man/man3/.../lsniff' [ Not found ] [14:54:31] Checking for directory '/usr/man/man3/.../TeLeKiT' [ Not found ] [14:54:31] TeLeKiT Rootkit [ Not found ] [14:54:31] [14:54:31] Checking for T0rn Rootkit... [14:54:31] Checking for file '/dev/.lib/lib/lib/t0rns' [ Not found ] [14:54:31] Checking for file '/dev/.lib/lib/lib/du' [ Not found ] [14:54:31] Checking for file '/dev/.lib/lib/lib/ls' [ Not found ] [14:54:31] Checking for file '/dev/.lib/lib/lib/t0rnsb' [ Not found ] [14:54:31] Checking for file '/dev/.lib/lib/lib/ps' [ Not found ] [14:54:32] Checking for file '/dev/.lib/lib/lib/t0rnp' [ Not found ] [14:54:32] Checking for file '/dev/.lib/lib/lib/find' [ Not found ] [14:54:32] Checking for file '/dev/.lib/lib/lib/ifconfig' [ Not found ] [14:54:32] Checking for file '/dev/.lib/lib/lib/pg' [ Not found ] [14:54:32] Checking for file '/dev/.lib/lib/lib/ssh.tgz' [ Not found ] [14:54:32] Checking for file '/dev/.lib/lib/lib/top' [ Not found ] [14:54:32] Checking for file '/dev/.lib/lib/lib/sz' [ Not found ] [14:54:32] Checking for file '/dev/.lib/lib/lib/login' [ Not found ] [14:54:32] Checking for file '/dev/.lib/lib/lib/in.fingerd' [ Not found ] [14:54:33] Checking for file '/dev/.lib/lib/lib/1i0n.sh' [ Not found ] [14:54:33] Checking for file '/dev/.lib/lib/lib/pstree' [ Not found ] [14:54:33] Checking for file '/dev/.lib/lib/lib/in.telnetd' [ Not found ] [14:54:33] Checking for file '/dev/.lib/lib/lib/mjy' [ Not found ] [14:54:33] Checking for file '/dev/.lib/lib/lib/sush' [ Not found ] [14:54:33] Checking for file '/dev/.lib/lib/lib/tfn' [ Not found ] [14:54:33] Checking for file '/dev/.lib/lib/lib/name' [ Not found ] [14:54:33] Checking for file '/dev/.lib/lib/lib/getip.sh' [ Not found ] [14:54:33] Checking for file '/usr/info/.torn/sh*' [ Not found ] [14:54:34] Checking for file '/usr/src/.puta/.1addr' [ Not found ] [14:54:34] Checking for file '/usr/src/.puta/.1file' [ Not found ] [14:54:34] Checking for file '/usr/src/.puta/.1proc' [ Not found ] [14:54:34] Checking for file '/usr/src/.puta/.1logz' [ Not found ] [14:54:34] Checking for file '/usr/info/.t0rn' [ Not found ] [14:54:34] Checking for directory '/dev/.lib' [ Not found ] [14:54:34] Checking for directory '/dev/.lib/lib' [ Not found ] [14:54:34] Checking for directory '/dev/.lib/lib/lib' [ Not found ] [14:54:34] Checking for directory '/dev/.lib/lib/lib/dev' [ Not found ] [14:54:35] Checking for directory '/dev/.lib/lib/scan' [ Not found ] [14:54:35] Checking for directory '/usr/src/.puta' [ Not found ] [14:54:35] Checking for directory '/usr/man/man1/man1' [ Not found ] [14:54:35] Checking for directory '/usr/man/man1/man1/lib' [ Not found ] [14:54:35] Checking for directory '/usr/man/man1/man1/lib/.lib' [ Not found ] [14:54:35] Checking for directory '/usr/man/man1/man1/lib/.lib/.backup' [ Not found ] [14:54:35] T0rn Rootkit [ Not found ] [14:54:35] [14:54:35] Checking for Trojanit Kit... [14:54:35] Checking for file '/bin/.ls' [ Not found ] [14:54:35] Checking for file '/bin/.ps' [ Not found ] [14:54:36] Checking for file '/bin/.netstat' [ Not found ] [14:54:36] Checking for file '/usr/bin/.nop' [ Not found ] [14:54:36] Checking for file '/usr/bin/.who' [ Not found ] [14:54:36] Trojanit Kit [ Not found ] [14:54:36] [14:54:36] Checking for Tuxtendo Rootkit... [14:54:36] Checking for file '/dev/tux/.addr' [ Not found ] [14:54:36] Checking for file '/dev/tux/.cron' [ Not found ] [14:54:36] Checking for file '/dev/tux/.file' [ Not found ] [14:54:36] Checking for file '/dev/tux/.log' [ Not found ] [14:54:36] Checking for file '/dev/tux/.proc' [ Not found ] [14:54:37] Checking for file '/dev/tux/backup/crontab' [ Not found ] [14:54:37] Checking for file '/dev/tux/backup/df' [ Not found ] [14:54:37] Checking for file '/dev/tux/backup/dir' [ Not found ] [14:54:37] Checking for file '/dev/tux/backup/find' [ Not found ] [14:54:37] Checking for file '/dev/tux/backup/ifconfig' [ Not found ] [14:54:37] Checking for file '/dev/tux/backup/locate' [ Not found ] [14:54:37] Checking for file '/dev/tux/backup/netstat' [ Not found ] [14:54:37] Checking for file '/dev/tux/backup/ps' [ Not found ] [14:54:38] Checking for file '/dev/tux/backup/pstree' [ Not found ] [14:54:38] Checking for file '/dev/tux/backup/syslogd' [ Not found ] [14:54:38] Checking for file '/dev/tux/backup/tcpd' [ Not found ] [14:54:38] Checking for file '/dev/tux/backup/top' [ Not found ] [14:54:38] Checking for file '/dev/tux/backup/updatedb' [ Not found ] [14:54:38] Checking for file '/dev/tux/backup/vdir' [ Not found ] [14:54:38] Checking for directory '/dev/tux' [ Not found ] [14:54:38] Checking for directory '/dev/tux/ssh2' [ Not found ] [14:54:38] Checking for directory '/dev/tux/backup' [ Not found ] [14:54:38] Tuxtendo Rootkit [ Not found ] [14:54:39] [14:54:39] Checking for URK Rootkit... [14:54:39] Checking for file '/usr/man/man1/xxxxxxbin/find' [ Not found ] [14:54:39] Checking for file '/usr/man/man1/xxxxxxbin/du' [ Not found ] [14:54:39] Checking for file '/usr/man/man1/xxxxxxbin/ps' [ Not found ] [14:54:39] Checking for file '/tmp/conf.inf' [ Not found ] [14:54:39] Checking for directory '/usr/man/man1/xxxxxxbin' [ Not found ] [14:54:39] URK Rootkit [ Not found ] [14:54:39] [14:54:39] Checking for VcKit Rootkit... [14:54:39] Checking for directory '/usr/include/linux/modules/lib.so' [ Not found ] [14:54:39] Checking for directory '/usr/include/linux/modules/lib.so/bin' [ Not found ] [14:54:40] VcKit Rootkit [ Not found ] [14:54:40] [14:54:40] Checking for Volc Rootkit... [14:54:40] Checking for directory '/var/spool/.recent' [ Not found ] [14:54:40] Checking for directory '/var/spool/.recent/.files' [ Not found ] [14:54:40] Checking for directory '/usr/lib/volc' [ Not found ] [14:54:40] Checking for directory '/usr/lib/volc/backup' [ Not found ] [14:54:40] Volc Rootkit [ Not found ] [14:54:40] [14:54:40] Checking for X-Org SunOS Rootkit... [14:54:40] Checking for file '/usr/lib/libX.a/bin/tmpfl' [ Not found ] [14:54:40] Checking for file '/usr/lib/libX.a/bin/rps' [ Not found ] [14:54:41] Checking for file '/usr/bin/srload' [ Not found ] [14:54:41] Checking for file '/usr/lib/libX.a/bin/sparcv7/rps' [ Not found ] [14:54:41] Checking for file '/usr/sbin/modcheck' [ Not found ] [14:54:41] Checking for directory '/usr/lib/libX.a' [ Not found ] [14:54:41] Checking for directory '/usr/lib/libX.a/bin' [ Not found ] [14:54:41] Checking for directory '/usr/lib/libX.a/bin/sparcv7' [ Not found ] [14:54:41] Checking for directory '/usr/share/man...' [ Not found ] [14:54:41] X-Org SunOS Rootkit [ Not found ] [14:54:41] [14:54:41] Checking for zaRwT.KiT Rootkit... [14:54:41] Checking for file '/dev/rd/s/sendmeil' [ Not found ] [14:54:41] Checking for file '/dev/ttyf' [ Not found ] [14:54:42] Checking for file '/dev/ttyp' [ Not found ] [14:54:42] Checking for file '/dev/ttyn' [ Not found ] [14:54:42] Checking for file '/rk/tulz' [ Not found ] [14:54:42] Checking for directory '/rk' [ Not found ] [14:54:42] Checking for directory '/dev/rd/s' [ Not found ] [14:54:42] zaRwT.KiT Rootkit [ Not found ] [14:54:42] [14:54:42] Performing additional rootkit checks [14:54:42] Info: Starting test name 'additional_rkts' [14:54:42] [14:54:42] Performing Suckit Rookit additional checks [14:54:42] Checking /sbin/init link count [ OK ] [14:54:42] Checking for hidden file extensions [ None found ] [14:54:43] Running skdet command [ Skipped ] [14:54:43] Info: Unable to find the 'skdet' command [14:54:43] Suckit Rookit additional checks [ OK ] [14:54:43] [14:54:43] Performing check of possible rootkit files and directories [14:54:43] Info: Starting test name 'possible_rkt_files' [14:54:43] Checking for file '/dev/sdr0' [ Not found ] [14:54:43] Checking for file '/tmp/.syshackfile' [ Not found ] [14:54:43] Checking for file '/tmp/.bash_history' [ Not found ] [14:54:43] Checking for file '/usr/info/.clib' [ Not found ] [14:54:43] Checking for file '/usr/sbin/tcp.log' [ Not found ] [14:54:44] Checking for file '/usr/bin/take/pid' [ Not found ] [14:54:44] Checking for file '/sbin/create' [ Not found ] [14:54:44] Checking for file '/dev/ttypz' [ Not found ] [14:54:44] Checking for directory '/usr/bin/take' [ Not found ] [14:54:44] Checking for directory '/usr/src/.lib' [ Not found ] [14:54:44] Checking for directory '/usr/share/man/man1/.1c' [ Not found ] [14:54:44] Checking for directory '/lib/lblip.tk' [ Not found ] [14:54:45] Checking for directory '/usr/sbin/...' [ Not found ] [14:54:45] Checking for directory '/usr/share/.gun' [ Not found ] [14:54:45] Checking for possible rootkit files and directories [ None found ] [14:54:45] [14:54:45] Performing check for possible rootkit strings [14:54:45] Info: Starting test name 'possible_rkt_strings' [14:54:45] Info: Found local startup file: /etc/rc.local [14:54:45] Checking for string '/dev/proc/fuckit' [ Not found ] [14:54:45] Checking for string 'f***' [ Not found ] [14:54:46] Checking for string 'backdoor' [ Not found ] [14:54:46] Checking for string 'vt200' [ Not found ] [14:54:46] Checking for string '/usr/bin/xstat' [ Not found ] [14:54:46] Checking for string '/bin/envpc' [ Not found ] [14:54:46] Checking for string 'L4m3r0x' [ Not found ] [14:54:46] Checking for string '/usr/lib/.tbd' [ Not found ] [14:54:46] Checking for string '/dev/ptyxx/.file' [ Not found ] [14:54:47] Checking for string '/dev/sgk' [ Not found ] [14:54:47] Checking for string '/var/lock/subsys/...datafile...' [ Not found ] [14:54:47] Checking for string '/usr/lib/.tbd' [ Not found ] [14:54:47] Checking for string '/dev/proc/fuckit' [ Not found ] [14:54:47] Checking for string '/lib/.sso' [ Not found ] [14:54:47] Checking for string '/var/lock/subsys/...datafile...' [ Not found ] [14:54:47] Checking for string '/dev/caca' [ Not found ] [14:54:48] Checking for string '/dev/ttyoa' [ Not found ] [14:54:48] Checking for string 'syg' [ Not found ] [14:54:48] Checking for string '/dev/pts/01' [ Not found ] [14:54:48] Checking for string 'tw33dl3' [ Not found ] [14:54:48] Checking for string 'psniff' [ Not found ] [14:54:48] Checking for string '/var/lock/subsys/...datafile...' [ Not found ] [14:54:49] Checking for string 'promiscuous' [ Not found ] [14:54:49] Checking for string '/usr/lib/.tbd' [ Not found ] [14:54:49] Checking for string '/dev/xdta' [ Not found ] [14:54:49] Checking for string '/usr/lib/.tbd' [ Not found ] [14:54:49] Checking for string 'in.inetd' [ Not found ] [14:54:49] Checking for string '#<HIDE_.*>' [ Not found ] [14:54:49] Checking for string 'bin/xchk' [ Not found ] [14:54:50] Checking for string 'bin/xsf' [ Not found ] [14:54:50] Checking for possible rootkit strings [ None found ] [14:54:50] [14:54:50] Performing malware checks [14:54:50] Info: Starting test name 'malware' [14:54:50] [14:54:50] Info: Test 'deleted_files' disabled at users request. [14:54:50] Info: Starting test name 'running_procs' [14:54:51] Checking running processes for suspicious files [ None found ] [14:54:51] [14:54:51] Info: Test 'hidden_procs' disabled at users request. [14:54:51] [14:54:51] Info: Test 'suspscan' disabled at users request. [14:54:51] [14:54:51] Performing check for login backdoors [14:54:51] Info: Starting test name 'other_malware' [14:54:51] Checking for '/bin/.login' [ Not found ] [14:54:51] Checking for '/sbin/.login' [ Not found ] [14:54:51] Checking for login backdoors [ None found ] [14:54:52] [14:54:52] Performing check for suspicious directories [14:54:52] Checking for directory '/usr/X11R6/bin/.,/copy' [ Not found ] [14:54:52] Checking for directory '/dev/rd/cdb' [ Not found ] [14:54:52] Checking for suspicious directories [ None found ] [14:54:52] [14:54:52] Checking for software intrusions [ Skipped ] [14:54:52] Info: Check skipped - tripwire not installed [14:54:52] [14:54:52] Performing check for sniffer log files [14:54:52] Checking for file '/usr/lib/libice.log' [ Not found ] [14:54:52] Checking for sniffer log files [ None found ] [14:54:52] [14:54:52] Performing trojan specific checks [14:54:53] Info: Starting test name 'trojans' [14:54:53] Info: Using inetd configuration file '/etc/inetd.conf' [14:54:53] Checking for enabled inetd services [ OK ] [14:54:53] [14:54:53] Performing check for enabled xinetd services [14:54:53] Checking for enabled xinetd services [ Skipped ] [14:54:53] Info: Check skipped - file '/etc/xinetd.conf' does not exist. [14:54:53] Info: Apache backdoor check skipped: Apache modules and configuration directories not found. [14:54:53] [14:54:53] Performing Linux specific checks [14:54:53] Info: Starting test name 'os_specific' [14:54:53] Checking kernel module commands [ OK ] [14:54:54] Info: Using modules pathname of '/lib/modules/2.6.24-22-rt' [14:54:55] Checking kernel module names [ OK ] [14:54:58] [14:54:58] Checking the network... [14:54:58] Info: Starting test name 'network' [14:54:58] Info: Starting test name 'ports' [14:54:58] [14:54:58] Performing check for backdoor ports [14:54:58] Checking for UDP port 2001 [ Not found ] [14:54:59] Checking for TCP port 2006 [ Not found ] [14:54:59] Checking for TCP port 2128 [ Not found ] [14:55:00] Checking for TCP port 14856 [ Not found ] [14:55:00] Checking for TCP port 47107 [ Not found ] [14:55:00] Checking for TCP port 60922 [ Not found ] [14:55:00] [14:55:00] Performing checks on the network interfaces [14:55:00] Info: Starting test name 'promisc' [14:55:00] Checking for promiscuous interfaces [ None found ] [14:55:00] [14:55:00] Info: Test 'packet_cap_apps' disabled at users request. [14:55:03] [14:55:03] Checking the local host... [14:55:03] Info: Starting test name 'local_host' [14:55:03] [14:55:03] Performing system boot checks [14:55:03] Info: Starting test name 'startup_files' [14:55:03] Checking for local host name [ Found ] [14:55:03] Info: Starting test name 'startup_malware' [14:55:03] Info: Found local startup file: /etc/rc.local [14:55:04] Checking for local startup files [ Found ] [14:55:04] Checking local startup files for malware [ None found ] [14:55:04] Info: Found system startup directory: /etc/init.d [14:55:07] Checking system startup files for malware [ None found ] [14:55:08] [14:55:08] Performing group and account checks [14:55:08] Info: Starting test name 'group_accounts' [14:55:08] Checking for passwd file [ Found ] [14:55:08] Info: Found password file: /etc/passwd [14:55:08] Checking for root equivalent (UID 0) accounts [ None found ] [14:55:08] Info: Found shadow file: /etc/shadow [14:55:08] Checking for passwordless accounts [ None found ] [14:55:08] Info: Starting test name 'passwd_changes' [14:55:08] Checking for passwd file changes [ None found ] [14:55:09] Info: Starting test name 'group_changes' [14:55:09] Checking for group file changes [ None found ] [14:55:09] Checking root account shell history files [ OK ] [14:55:09] [14:55:09] Performing system configuration file checks [14:55:09] Info: Starting test name 'system_configs' [14:55:09] Checking for SSH configuration file [ Not found ] [14:55:09] Checking for running syslog daemon [ Found ] [14:55:09] Checking for syslog configuration file [ Found ] [14:55:09] Info: Found syslog configuration file: /etc/syslog.conf [14:55:09] Checking if syslog remote logging is allowed [ Not allowed ] [14:55:10] [14:55:10] Performing filesystem checks [14:55:10] Info: Starting test name 'filesystem' [14:55:10] Info: SCAN_MODE_DEV set to 'THOROUGH' [14:56:36] Checking /dev for suspicious file types [ Warning ] [14:56:36] Warning: Suspicious file types found in /dev: [14:56:36] /dev/shm/pulse-shm-369427087: data [14:56:37] Checking for hidden files and directories [ Warning ] [14:56:37] Warning: Hidden directory found: /etc/.java [14:56:37] Warning: Hidden directory found: /dev/.static [14:56:37] Warning: Hidden directory found: /dev/.udev [14:56:37] Warning: Hidden directory found: /dev/.initramfs [14:56:40] [14:56:40] Checking application versions... [14:56:40] Info: Starting test name 'apps' [14:56:41] Checking version of Exim MTA [ OK ] [14:56:42] Info: Application 'exim' version '4.69' found. [14:56:42] Checking version of GnuPG [ OK ] [14:56:42] Info: Application 'gpg' version '1.4.6' found. [14:56:42] Info: Application 'httpd' not found. [14:56:42] Info: Application 'named' not found. [14:56:42] Checking version of OpenSSL [ OK ] [14:56:42] Info: Application 'openssl' version '0.9.8g' found. [14:56:42] Info: Application 'php' not found. [14:56:42] Info: Application 'procmail' not found. [14:56:42] Info: Application 'proftpd' not found. [14:56:42] Info: Application 'sshd' not found. [14:56:42] Info: Applications checked: 3 out of 9 [14:56:43] [14:56:43] System checks summary [14:56:43] ===================== [14:56:43] [14:56:43] File properties checks... [14:56:43] Files checked: 123 [14:56:43] Suspect files: 0 [14:56:43] [14:56:43] Rootkit checks... [14:56:43] Rootkits checked : 109 [14:56:43] Possible rootkits: 0 [14:56:43] [14:56:43] Applications checks... [14:56:43] Applications checked: 3 [14:56:43] Suspect applications: 0 [14:56:43] [14:56:43] The system checks took: 4 minutes and 40 seconds [14:56:43] [14:56:43] Info: End date is Σαβ 20 Δεκ 2008 02:56:43 μμ EET

νομίζω είναι οκ τώρα ?! :shock:

από **emmsarris** » 10 Φεβ 2010, 16:22

Επειδή είναι παρόμοιο το θέμα, για να μην ανοίγω άλλο γράφω εδώ.
Έτρεξα το rkhunter, έκανα και όπως έγραψε ο linuxman, αλλά τα αποτελέσματα του τελικού scan δίνουν:

Κώδικας: Επιλογή όλων: [15:16:15] Info: Found syslog configuration file: /etc/rsyslog.conf [15:16:15] Checking if syslog remote logging is allowed [ Not allowed ] [15:16:15] [15:16:15] Performing filesystem checks [15:16:15] Info: Starting test name 'filesystem' [15:16:15] Info: SCAN_MODE_DEV set to 'THOROUGH' [15:16:16] Checking /dev for suspicious file types [ Warning ] [15:16:16] Warning: Suspicious file types found in /dev: [15:16:16] /dev/shm/pulse-shm-592900854: data [15:16:16] /dev/shm/pulse-shm-141216136: data [15:16:16] /dev/shm/pulse-shm-2871759924: data [15:16:16] /dev/shm/pulse-shm-3583346511: data [15:16:16] /dev/shm/pulse-shm-1447868011: data [15:16:17] /dev/shm/pulse-shm-3097012249: data [15:16:17] /dev/shm/pulse-shm-421957362: data [15:16:17] /dev/shm/pulse-shm-2519959735: AmigaOS bitmap font [15:16:17] /dev/shm/pulse-shm-3765806477: data [15:16:17] Checking for hidden files and directories [ Warning ] [15:16:17] Warning: Hidden directory found: /etc/.java [15:16:17] Warning: Hidden directory found: /dev/.udev [15:16:17] Warning: Hidden directory found: /dev/.initramfs [15:16:23] [15:16:23] Checking application versions... [15:16:23] Info: Starting test name 'apps' [15:16:24] Checking version of Exim MTA [ Warning ] [15:16:24] Warning: Application 'exim', version '4.69', is out of date, and possibly a security risk. [15:16:24] Checking version of GnuPG [ Warning ] [15:16:24] Warning: Application 'gpg', version '1.4.9', is out of date, and possibly a security risk. [15:16:24] Info: Application 'httpd' not found. [15:16:24] Info: Application 'named' not found. [15:16:24] Checking version of OpenSSL [ Warning ] [15:16:25] Warning: Application 'openssl', version '0.9.8g', is out of date, and possibly a security risk. [15:16:25] Info: Application 'php' not found. [15:16:25] Info: Application 'procmail' not found. [15:16:25] Info: Application 'proftpd' not found. [15:16:25] Info: Application 'sshd' not found. [15:16:25] Info: Applications checked: 3 out of 9 [15:16:25] [15:16:25] System checks summary [15:16:25] ===================== [15:16:25] [15:16:25] File properties checks... [15:16:25] Files checked: 129 [15:16:25] Suspect files: 0 [15:16:25] [15:16:25] Rootkit checks... [15:16:25] Rootkits checked : 111 [15:16:25] Possible rootkits: 0 [15:16:25] [15:16:25] Applications checks... [15:16:25] Applications checked: 3 [15:16:25] Suspect applications: 3 [15:16:26]

Τι τρέχει..?

από **linuxman** » 10 Φεβ 2010, 16:49

Αν βγάλεις το Exim και βάλεις το postfix με την επιλογή local only όταν θα σε κάνει ερώτηση τότε λογικά θα είσαι οκ , τα υπόλοιπα δεν είναι τίποτα .

από **emmsarris** » 10 Φεβ 2010, 16:58

Θα με υποχρέωνες αν θα το έδινες με εντολή καθότι σήμερα έμαθα για την εντολή και είμαι και Αρχάριος...
Κοινώς,

έγραψε:Δε μου το κάνεις φραγκοδίφραγκο...

από **linuxman** » 10 Φεβ 2010, 18:21

emmsarris έγραψε:Θα με υποχρέωνες αν θα το έδινες με εντολή καθότι σήμερα έμαθα για την εντολή και είμαι και Αρχάριος...
Κοινώς,
έγραψε:Δε μου το κάνεις φραγκοδίφραγκο...

Άντε καλά .
1.

Κώδικας: Επιλογή όλων: sudo /etc/init.d/exim stop

εδώ μπορεί να μην είναι exim άλλα exim4 κάτι ανάλογο
2.

Κώδικας: Επιλογή όλων: sudo apt-get remove --purge exim or exim4

ανάλογα τι θα σου βγάλει ποιο πάνω
3.

Κώδικας: Επιλογή όλων: sudo apt-get install postfix

εδώ προσοχή όπου θα σε ρωτήσει πως θα τρέχει θα επιλέξεις local η localhost κάπως έτσι θα είναι επιλογή στο παράθυρο που θα σε βγάλει στο τερματικό .

rkhunter

rkhunter

Re: rkhunter

Re: rkhunter

Re: rkhunter

Re: rkhunter

Re: rkhunter

Re: rkhunter

Re: rkhunter

Re: rkhunter

Re: rkhunter