Trojan's detected - how to restore the original files?

listenmirndt

Member
Jul 14, 2004
23
0
151
Hi all,

My WHM is telling me that the following files are possibly trojans, I am wondering how to restore the original versions, of these files, as they seem to be cpanel files... (some atleast)..

/etc/cron.daily/logrotate
/usr/bin/cpan
/usr/bin/instmodsh
/usr/bin/prove
/usr/bin/psed
/usr/bin/pstruct
/usr/bin/s2p
/usr/bin/splain
/usr/bin/xsubpp
/usr/sbin/pureauth
 

ebbcom

Registered
Apr 12, 2007
1
0
151
You could to restore if you have an backup, be sure to check last system update, rkhuner and others checks for a MD5 hash for files - so it may be an update files not infected one. I think this is false positive :)