The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

POSSIBLE Trojans Detected

Discussion in 'General Discussion' started by crazyaboutlinux, Mar 23, 2009.

  1. crazyaboutlinux

    crazyaboutlinux Well-Known Member

    Joined:
    Nov 3, 2007
    Messages:
    938
    Likes Received:
    0
    Trophy Points:
    16
    Today i have scaned our for Trojan Horses & found 14 POSSIBLE Trojans Detected

    Main >> Security >> Scan for Trojan Horses

    Scan for Trojan Horses
    Appears Clean

    /dev/core
    /dev/stderr

    Scanning for Trojan Horses.....
    .
    Possible Trojan - /usr/bin/cpan
    .
    Possible Trojan - /usr/bin/instmodsh
    .
    Possible Trojan - /usr/bin/prove
    .
    Possible Trojan - /usr/bin/psed
    .
    Possible Trojan - /usr/bin/pstruct
    .
    Possible Trojan - /usr/bin/s2p
    .
    Possible Trojan - /usr/bin/splain
    .
    Possible Trojan - /usr/bin/xsubpp
    .
    Possible Trojan - /etc/rc.d/init.d/acpid
    .
    Possible Trojan - /usr/sbin/acpid
    .
    Possible Trojan - /usr/sbin/antirelayd
    .
    Possible Trojan - /usr/bin/mysqlhotcopy
    .
    Possible Trojan - /etc/cron.daily/logrotate
    .
    Possible Trojan - /usr/sbin/pureauth
    14 POSSIBLE Trojans Detected

    now please tell me how do i remove Trojan from our server

    We are using:
    cPanel 11.24.4-S33345
    WHM 11.24.2 - X 3.9
    CENTOS 4.7 i686 on standard

    Regards,
    Nilesh
     
  2. peacemaker

    peacemaker Member

    Joined:
    Nov 29, 2007
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    WHM's Trojan horse scanner throws lots of false warnings which can be ignored, Its better you use rkhunter for scanning the server.
    http://www.rootkit.nl/projects/rootkit_hunter.html

    b/w its a nice idea to use the search option before you post a query!!
     
Loading...

Share This Page