The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

A Scan for Trojan Horses

Discussion in 'General Discussion' started by multivol, Oct 5, 2002.

  1. multivol

    multivol Active Member

    Joined:
    Sep 1, 2002
    Messages:
    25
    Likes Received:
    0
    Trophy Points:
    1
    Am i safe?



    ----------
    Appears Clean



    /dev/core



    Scanning for Trojan Horses.....
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .

    Possible Trojan - /usr/bin/GET
    .

    Possible Trojan - /usr/bin/HEAD
    .

    Possible Trojan - /usr/bin/POST
    .

    Possible Trojan - /usr/bin/lwp-download
    .

    Possible Trojan - /usr/bin/lwp-mirror
    .

    Possible Trojan - /usr/bin/lwp-request
    .

    Possible Trojan - /usr/bin/lwp-rget
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .

    Possible Trojan - /usr/bin/php
    .
    .
    .
    .
    .
    .
    .

    Possible Trojan - /usr/sbin/imapd
    .
    .

    Possible Trojan - /usr/local/frontpage/version5.0/apache-fp/_vti_bin/fpexe
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .

    Possible Trojan - /usr/bin/a2p
    .
    .
    .
    .
    .
    .

    Possible Trojan - /usr/bin/perl
    .

    Possible Trojan - /usr/bin/perl5.6.1
    .

    Possible Trojan - /usr/bin/perlbug
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .

    Possible Trojan - /usr/bin/dbiproxy
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .

    Possible Trojan - /usr/lib/libexpat.so.0.1.0
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .

    Possible Trojan - /usr/bin/pear
    .

    Possible Trojan - /usr/bin/php-config
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .

    Possible Trojan - /usr/include/php/main/php_streams.h
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .

    Possible Trojan - /usr/lib/php/build/fastgen.sh
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    error: execution of %verify scriptlet from tripwire-2.3-47 failed, exit status 2
     
  2. itf

    itf Well-Known Member

    Joined:
    May 9, 2002
    Messages:
    624
    Likes Received:
    0
    Trophy Points:
    16
    [quote:af28c48060][i:af28c48060]Originally posted by multivol[/i:af28c48060]

    Am i safe?



    ----------
    Appears Clean

    /dev/core

    Scanning for Trojan Horses.....
    Possible Trojan - /usr/bin/GET
    Possible Trojan - /usr/bin/HEAD
    Possible Trojan - /usr/bin/POST
    Possible Trojan - /usr/bin/lwp-download
    Possible Trojan - /usr/bin/lwp-mirror
    Possible Trojan - /usr/bin/lwp-request
    Possible Trojan - /usr/bin/lwp-rget
    Possible Trojan - /usr/bin/php
    Possible Trojan - /usr/sbin/imapd
    Possible Trojan - /usr/local/frontpage/version5.0/apache-fp/_vti_bin/fpexe
    Possible Trojan - /usr/bin/a2p
    Possible Trojan - /usr/bin/perl
    Possible Trojan - /usr/bin/perl5.6.1
    Possible Trojan - /usr/bin/perlbug
    Possible Trojan - /usr/bin/dbiproxy
    Possible Trojan - /usr/lib/libexpat.so.0.1.0
    Possible Trojan - /usr/bin/pear
    Possible Trojan - /usr/bin/php-config
    Possible Trojan - /usr/include/php/main/php_streams.h
    Possible Trojan - /usr/lib/php/build/fastgen.sh

    error: execution of %verify scriptlet from tripwire-2.3-47 failed, exit status 2[/quote:af28c48060]

    It seems your system is clean
     
  3. multivol

    multivol Active Member

    Joined:
    Sep 1, 2002
    Messages:
    25
    Likes Received:
    0
    Trophy Points:
    1
    you being sarcastic?
     
  4. mikerayner

    mikerayner Well-Known Member

    Joined:
    Apr 10, 2002
    Messages:
    192
    Likes Received:
    0
    Trophy Points:
    16
    I want to know too?
     
  5. itf

    itf Well-Known Member

    Joined:
    May 9, 2002
    Messages:
    624
    Likes Received:
    0
    Trophy Points:
    16
    [quote:634cb1c3dd][i:634cb1c3dd]Originally posted by multivol[/i:634cb1c3dd]

    you being sarcastic?[/quote:634cb1c3dd]

    &you being sarcastic ? [b:634cb1c3dd] NO[/b:634cb1c3dd]

    You asked, “Am I safe? “ I answered “ It seems your system is clean” you can consider this as yes due to your report

    I never answer yes or no when I do not administer or check up a system myself
    Making sure about security and safety of systems is far from just Scanning for Trojans in WHM.

    but what you see in that report as Possible Trojans are due to your running services.
     
Loading...

Share This Page