A Scan for Trojan Horses

multivol

Active Member
Sep 1, 2002
25
0
151
Am i safe?



----------
Appears Clean



/dev/core



Scanning for Trojan Horses.....
.
.
.
.
.
.
.
.
.
.

Possible Trojan - /usr/bin/GET
.

Possible Trojan - /usr/bin/HEAD
.

Possible Trojan - /usr/bin/POST
.

Possible Trojan - /usr/bin/lwp-download
.

Possible Trojan - /usr/bin/lwp-mirror
.

Possible Trojan - /usr/bin/lwp-request
.

Possible Trojan - /usr/bin/lwp-rget
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.

Possible Trojan - /usr/bin/php
.
.
.
.
.
.
.

Possible Trojan - /usr/sbin/imapd
.
.

Possible Trojan - /usr/local/frontpage/version5.0/apache-fp/_vti_bin/fpexe
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.

Possible Trojan - /usr/bin/a2p
.
.
.
.
.
.

Possible Trojan - /usr/bin/perl
.

Possible Trojan - /usr/bin/perl5.6.1
.

Possible Trojan - /usr/bin/perlbug
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.

Possible Trojan - /usr/bin/dbiproxy
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.

Possible Trojan - /usr/lib/libexpat.so.0.1.0
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.

Possible Trojan - /usr/bin/pear
.

Possible Trojan - /usr/bin/php-config
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.

Possible Trojan - /usr/include/php/main/php_streams.h
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.

Possible Trojan - /usr/lib/php/build/fastgen.sh
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
error: execution of %verify scriptlet from tripwire-2.3-47 failed, exit status 2
 

itf

Well-Known Member
May 9, 2002
620
0
316
[quote:af28c48060][i:af28c48060]Originally posted by multivol[/i:af28c48060]

Am i safe?



----------
Appears Clean

/dev/core

Scanning for Trojan Horses.....
Possible Trojan - /usr/bin/GET
Possible Trojan - /usr/bin/HEAD
Possible Trojan - /usr/bin/POST
Possible Trojan - /usr/bin/lwp-download
Possible Trojan - /usr/bin/lwp-mirror
Possible Trojan - /usr/bin/lwp-request
Possible Trojan - /usr/bin/lwp-rget
Possible Trojan - /usr/bin/php
Possible Trojan - /usr/sbin/imapd
Possible Trojan - /usr/local/frontpage/version5.0/apache-fp/_vti_bin/fpexe
Possible Trojan - /usr/bin/a2p
Possible Trojan - /usr/bin/perl
Possible Trojan - /usr/bin/perl5.6.1
Possible Trojan - /usr/bin/perlbug
Possible Trojan - /usr/bin/dbiproxy
Possible Trojan - /usr/lib/libexpat.so.0.1.0
Possible Trojan - /usr/bin/pear
Possible Trojan - /usr/bin/php-config
Possible Trojan - /usr/include/php/main/php_streams.h
Possible Trojan - /usr/lib/php/build/fastgen.sh

error: execution of %verify scriptlet from tripwire-2.3-47 failed, exit status 2[/quote:af28c48060]

It seems your system is clean
 

itf

Well-Known Member
May 9, 2002
620
0
316
[quote:634cb1c3dd][i:634cb1c3dd]Originally posted by multivol[/i:634cb1c3dd]

you being sarcastic?[/quote:634cb1c3dd]

&you being sarcastic ? [b:634cb1c3dd] NO[/b:634cb1c3dd]

You asked, “Am I safe? “ I answered “ It seems your system is clean” you can consider this as yes due to your report

I never answer yes or no when I do not administer or check up a system myself
Making sure about security and safety of systems is far from just Scanning for Trojans in WHM.

but what you see in that report as Possible Trojans are due to your running services.