The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Trojan Scanner

Discussion in 'General Discussion' started by kingspice, Sep 22, 2005.

  1. kingspice

    kingspice Registered

    Joined:
    May 8, 2005
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    Hi there,
    Just ran the trojan scanner on the WHM. The results were as follows:
    dev/stderr
    Scanning for Trojan Horses.....
    Possible Trojan - /sbin/depmod
    Possible Trojan - /sbin/insmod
    Possible Trojan - /sbin/insmod.static
    Possible Trojan - /sbin/modinfo
    Possible Trojan - /sbin/modprobe
    Possible Trojan - /sbin/rmmod
    Possible Trojan - /usr/bin/dbiprof
    Possible Trojan - /usr/bin/pear
    8 POSSIBLE Trojans Detected


    Is this something to be concerned about and what course of action can I take if it is?

    Gareth
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    The Trojan scanner is pretty much useless as it throws up too many false-positives. You could try using rkhunter which is more reliable a method. Looking at those files, though, if you have a custom kernel installed then most of those most likely have been changed from the rpm installed ones.
     
Loading...

Share This Page