The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

18 Possible Trojans - for real?

Discussion in 'General Discussion' started by kistler, Jun 22, 2006.

  1. kistler

    kistler Well-Known Member

    Joined:
    Jan 27, 2005
    Messages:
    136
    Likes Received:
    0
    Trophy Points:
    16
    I did a scan and I got 18 possible trojans and well i am not sure if they are or how i scould go about removing them.

    Code:
    Possible Trojan - /usr/bin/animate
    .
    
    Possible Trojan - /usr/bin/composite
    .
    
    Possible Trojan - /usr/bin/conjure
    .
    
    Possible Trojan - /usr/bin/convert
    .
    
    Possible Trojan - /usr/bin/display
    .
    
    Possible Trojan - /usr/bin/identify
    .
    
    Possible Trojan - /usr/bin/import
    .
    
    Possible Trojan - /usr/bin/mogrify
    .
    
    Possible Trojan - /usr/bin/montage
    .
    
    Possible Trojan - /usr/bin/xml2-config
    .
    
    Possible Trojan - /usr/lib/libxml2.la
    .
    
    Possible Trojan - /usr/bin/curl
    .
    
    Possible Trojan - /usr/lib/python2.2/site-packages/libxml2mod.la
    .
    
    Possible Trojan - /usr/lib/python2.2/site-packages/libxml2mod.so
    .
    
    Possible Trojan - /usr/bin/xmlcatalog
    .
    
    Possible Trojan - /usr/bin/xmllint
    .
    
    Possible Trojan - /usr/bin/dbiprof
    .
    
    Possible Trojan - /usr/bin/curl-config
    .
    
    
    
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    The Trojan feature in WHM is next to useless. You're better off using tools such as rkhunter and chkrootkit (search the forums for more info on them).
     
  3. concreteman

    concreteman Well-Known Member

    Joined:
    May 22, 2003
    Messages:
    48
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    sillycone valley
    Perhaps cpanel could include rkhunter, maybe they should talk to the developer... even it turns up false positives, but chirpy is right... useless
     
  4. kistler

    kistler Well-Known Member

    Joined:
    Jan 27, 2005
    Messages:
    136
    Likes Received:
    0
    Trophy Points:
    16
    i installed chkrootkit and was going to run that after i seen what WHM said, I'll take a look at rkhunter. Which one would you say works better? I can use both at the same time, right?
     
  5. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    You can use both. I'd say rkhunter provides the most information, though they both check things using different methods - which is good.
     
Loading...

Share This Page