The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Trojan's detected - how to restore the original files?

Discussion in 'General Discussion' started by listenmirndt, Aug 23, 2007.

  1. listenmirndt

    listenmirndt Member

    Joined:
    Jul 14, 2004
    Messages:
    23
    Likes Received:
    0
    Trophy Points:
    1
    Hi all,

    My WHM is telling me that the following files are possibly trojans, I am wondering how to restore the original versions, of these files, as they seem to be cpanel files... (some atleast)..

    /etc/cron.daily/logrotate
    /usr/bin/cpan
    /usr/bin/instmodsh
    /usr/bin/prove
    /usr/bin/psed
    /usr/bin/pstruct
    /usr/bin/s2p
    /usr/bin/splain
    /usr/bin/xsubpp
    /usr/sbin/pureauth
     
  2. ebbcom

    ebbcom Registered

    Joined:
    Apr 12, 2007
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    You could to restore if you have an backup, be sure to check last system update, rkhuner and others checks for a MD5 hash for files - so it may be an update files not infected one. I think this is false positive :)
     
Loading...

Share This Page