The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Trojan Horse??

Discussion in 'General Discussion' started by shauvik, Feb 15, 2006.

  1. shauvik

    shauvik Member

    Joined:
    Jan 18, 2005
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    i did a Main >> Security >> Scan for Trojan Horses

    I believe all these are safe...
    Any idea???

    Code:
    Appears Clean
    
    
    /dev/core
    /dev/stderr
    
    
    Scanning for Trojan Horses.....
    .
    .
    .
    Possible Trojan - /usr/bin/cpan
    .
    .
    Possible Trojan - /usr/bin/pstruct
    
    Possible Trojan - /usr/bin/splain
    .
    .
    .
    .
    .
    3 POSSIBLE Trojans Detected
    
     
  2. mxweb

    mxweb Active Member

    Joined:
    Feb 16, 2006
    Messages:
    38
    Likes Received:
    0
    Trophy Points:
    6
    i get the same message when i run virusses scanns but its impossible for my servers to get viruses as our datacenter has the highest level firewalls available on the market so i just think that its suspitious system activity.
     
  3. forlinuxsupport

    forlinuxsupport Well-Known Member
    PartnerNOC

    Joined:
    Dec 22, 2004
    Messages:
    386
    Likes Received:
    0
    Trophy Points:
    16
    cPanel Access Level:
    Root Administrator

    hmmm.. sounds like a challenge..... better be careful :)
     
  4. elliotcooper

    elliotcooper Well-Known Member
    PartnerNOC

    Joined:
    May 18, 2005
    Messages:
    56
    Likes Received:
    0
    Trophy Points:
    6
    The trojan scanner in notorious for throwing up false positives. If you do ao quick search on the forums then you can find a lot of threads regarding this topic. However, although likly this doesn't mean that they are not trojans. if you are worried about these then you should run one or both of these programs:

    http://www.rootkit.nl/
    http://www.chkrootkit.org/

    Also, mxweb, you should not rely upon a single security measure like a firewall to keep your server secure. No single security mesure will ever do this for you. If you are worried about security, which you should be, then you could do a lot worse than starting with the measures listed here:

    http://forums.cpanel.net/showthread.php?t=30159&highlight=trojan+scan
     
  5. shauvik

    shauvik Member

    Joined:
    Jan 18, 2005
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    Thanx for all the expert advice... i'll run the Secure your server steps soon :)
     

Share This Page