 |
|
Página 1 de 1
|
[ 10 Mensagens ] |
|
| Autor |
Mensagem |
|
Epidemic Usuário
Data de registro: Ter Mar 04, 2008 8:50 am Mensagens: 9
|
 segurança no epidemic
Muitos SO's são instalados de maneira padrão e muitas vezes deixa muitas portas abertas dentre outras "facilidades" para a entrada de intrusos, como exemplo é o próprio Rwindows.
Diante destas facilidades na instalação, usuários com pouca experiência no mundo linux, EU, senhas fáceis entre outras, há um ambiente propício aos invasores - vírus, trojans, cavalos de tróias etc.
Já se ouve falar de vírus no Linux, é verdade?
Mas como fica o Epidemic diante desta realidade?
A instalação, facilitada, já se configura uma porta de entrada para certos ataques?
Como a equipe de desenvolvedores vêem a questão de segurança, qual o nível de segurança que o Epidemic oferece hoje aos seus usuários?
Quais opções nos são oferecidas para aumentarmos o nível de segurança, e como podemos implementa-las?
Como podemos monitorar o trafego em nosso micro?
Minha preocupação é conhecer um pouco mais o sistema, e com isso usar cada vez mais, claro, depende tanbém de nós usuários a qüestão de segurança, desde que conheçamos a nossa como proceder.
Atenciosamente,
mtinel001
|
| Seg Mar 10, 2008 9:31 am |
|
 |
|
Epidemic Usuário
Data de registro: Ter Jan 29, 2008 6:37 am Mensagens: 45
|
Vírus no Linux é difícil, pois os modos de permissão do mesmo o deixam imune em certos casos, e os vírus para Windows são diferentes, só são para Windows pois a arquitetura é diferente...
Te um lance de "botnets" mas você resolve isso sem se logar como root por qualquer coisa e uma boa senha de root, dá uma googlada em botnets e leia a respeito...
_________________ Jesus Negão - E era para não ser?
|
| Sáb Mar 22, 2008 2:50 am |
|
 |
|
Epidemic Usuário
Data de registro: Sáb Fev 02, 2008 7:08 pm Mensagens: 110
|
Oi James, mais uma vez venho tirar uma dúvida. Estou usando o epidemic 2.1 e não fiz nenhum upgrade do sistema, o epidemic 2.1 é seguro? pois já se passaram quase 1 ano que a distro foi lançada e fico com essa dúvida. Me perdoe James, pois o que me interessa no epidemic não é as perfumarias (compiz, etc...) mas sim estar com uma distro segura e estável. (estável ela é  ) .
Abraços.
|
| Qua Jan 07, 2009 10:26 pm |
|
 |
|
Desenvolvedor
Data de registro: Ter Mar 13, 2007 7:58 am Mensagens: 1893
|
Oi antonio,
Esta questão da segurança é bem complexa. Existem inclusive distribuições que se voltaram especificamente para esta área, como é o caso, por exemplo, do Adamantix, que, no entanto, acabou sendo descontinuado.
Mas se você não possui dados extremamente valiosos, não possui uma dezena de servidores ligados à internet e não é paranóico com segurança, creio que o Epidemic 2.1 continua sendo uma distribuição bastante segura.
O Epidemic 2.1 foi lançado em maio de 2007, possui 7 meses de vida e não está, portanto, tão velho assim.
É claro que manter o sistema atualizado, no que tange a segurança é muito importante e o Debian possui uma ferramenta muito fácil de usar para esta finalidade que é o Debian Security Analyzer (debsecan).
Para utilizá-lo no Epidemic, basta digitar os seguintes comandos, como root:
Código: # apt-get update # apt-get install debsecan # debsecan --suite lenny --only-fixed --format packages Este último comando irá mostrar na tela uma lista de pacotes de correções de segurança que podem ser facilmente instalados com o pat-get. Se você quiser, pode instalar todos de uma só vez, com o comando Código: # apt-get install $(debsecan --suite lenny --only-fixed --format packages)
Mas eu particularmente prefiro instalar separadamente, principalmente os pacotes que se relacionam com o servidor X, como o xserver-xorg-core, pois são pacotes que, caso possuam algum bug, podem fazer com que o sistema não mais inicie no modo gráfico, tornando mais complicada a solução do problema.
É claro que não basta ter um sistema atualizado para estar seguro. Na verdade, a adoção de algumas medidas simples como, por exemplo, a utilização do sistema, sempre que possível, como usuário comum (sem privilégios de root), a utilização de senhas fortes tanto para o usuários quanto para os administradores do sistema, a ativação do firewall que acompanha o Epidemic 2.1 (o Firestarter) e a não instalação desnecessária de qualquer tipo de servidor (http, ftp etc) pode contribuir e muito para o incremento da segurança do sistema.
Por falar nisso servidores, como o Apache e o Proftpd e aplicações como programas p2p, programas de comunicação na internet e os próprios navegadores como o Icewasel e o Konqueror, são pontos sensíveis, por estarem diretamente em contato com o mundo exterior e nestes casos é sempre recomendável, para os que realmente se preocupam com a segurança do sistema, o acompanhamento dos alertas de segurança que são divulgados, geralmente, nos sites de cada um destes projetos.
Ah, antes que eu me esqueça, na página Wiki do Epidemic, existe um artigo escrito pelo kuruka que ensina a usar o Rkhunter, uma ferramenta bem simples, capaz de detectar rootkits no sistema.
Bom antônio, espero não ter lhe assustado com estas informações, mas a verdade é que segurança é sempre um ponto extremamente complexo em qualquer sistema, e simplesmente manter um sistema atualizado, ao contrário do que possa parecer (ou melhor ao contrário do que possam querer fazer os usuários acreditar) não é o suficiente.
Basta dar uma olhada no Manual de Segurança Debian, um excelente manual, em português por sinal, para ver o grau de complexidade que envolve a matéria.
Abraços,
James.
_________________
|
| Sex Jan 09, 2009 7:01 am |
|
 |
|
Epidemic Usuário
Data de registro: Sáb Fev 02, 2008 7:08 pm Mensagens: 110
|
Bom dia James, muito obrigado pela aula sobre segurança, você como sempre você é nota 10  . Vou seguir seus conselhos , mas antes vou pesquisar no manual de segurança Debian, pois para mim a segurança em um sistema vem em primeiro lugar. Existe algum livro que eu possa me aprofundar no mundo linux (para novatos, pois eu não tenho muito tempo disponivél, filhas, trabalho, etc.) Eu consegui um livro do morimoto - entendendo e dominando o linux, esse livro é bom? ou você me indica algum outro?. Na net tem muita coisa boa, mas eu fico com os olhos cansados de ler (por causa do monitor) . Mais uma vez muito obrigado.
Abraços.
|
| Sex Jan 09, 2009 10:36 am |
|
 |
|
Epidemic Usuário
Data de registro: Sáb Fev 02, 2008 7:08 pm Mensagens: 110
|
Fiz o teste do rkhunter e o resultado foi este:
File properties checks...
Files checked: 120
Suspect files: 2
Rootkit checks...
Rootkits checked : 110
Possible rootkits: 0
Applications checks...
Applications checked: 5
Suspect applications: 0
The system checks took: 1 minute and 30 seconds
All results have been written to the logfile (/var/log/rkhunter.log)
One or more warnings have been found while checking the system.
Please check the log file (/var/log/rkhunter.log)
Alguem poderia me ajudar, acusou 2 suspect file o que devo fazer? ou não precisa fazer nada?
Abraços.
|
| Dom Jan 11, 2009 11:01 am |
|
 |
|
Desenvolvedor
Data de registro: Ter Mar 13, 2007 7:58 am Mensagens: 1893
|
Oi antonio,
Quanto ao livro do Morimoto, eu não cheguei a lê-lo, por isso, não posso recomendá-lo, mas o kuruka tem trazido um excelente material para a área de dicas e tutoriais do nosso forum e você pode passar por lá para dar uma conferida.
Quanto ao rkhunter, na verdade nenhum rootkit foi encontrado no sistema.
Citação: Possible rootkits: 0
A mensagem Suspect files: 2 diz apenas que o rkhunter, não conseguiu verificar a integridade de dois arquivos, o que pode ter ocorrido pelos mais variados motivos.
Mas se você quiser saber mais sobre o que está acontecendo, poste aqui a saída do comando
Código: # cat /var/log/rkhunter.log
Para que possamos ter mais informações sobre os arquivos suspeitos.
Abraços,
James.
_________________
|
| Dom Jan 11, 2009 8:26 pm |
|
 |
|
Epidemic Usuário
Data de registro: Sáb Fev 02, 2008 7:08 pm Mensagens: 110
|
Oi James, este é o resultado:
[11:52:31] /usr/bin/id [ OK ]
[11:52:31] /usr/bin/killall [ OK ]
[11:52:31] /usr/bin/last [ OK ]
[11:52:31] /usr/bin/lastlog [ OK ]
[11:52:31] /usr/bin/ldd [ OK ]
[11:52:31] Info: Found file '/usr/bin/ldd': it is whitelisted for the 'script replacement' check.
[11:52:31] /usr/bin/logger [ OK ]
[11:52:31] /usr/bin/lsattr [ OK ]
[11:52:31] /usr/bin/lsof [ OK ]
[11:52:32] /usr/bin/mail [ OK ]
[11:52:32] /usr/bin/md5sum [ OK ]
[11:52:32] /usr/bin/newgrp [ OK ]
[11:52:32] /usr/bin/passwd [ OK ]
[11:52:32] /usr/bin/perl [ OK ]
[11:52:32] /usr/bin/pstree [ OK ]
[11:52:32] /usr/bin/rkhunter [ OK ]
[11:52:32] /usr/bin/runcon [ OK ]
[11:52:33] /usr/bin/sha1sum [ OK ]
[11:52:33] /usr/bin/size [ OK ]
[11:52:33] /usr/bin/sort [ OK ]
[11:52:33] /usr/bin/stat [ OK ]
[11:52:33] /usr/bin/strings [ OK ]
[11:52:33] /usr/bin/sudo [ OK ]
[11:52:33] /usr/bin/tail [ OK ]
[11:52:33] /usr/bin/test [ OK ]
[11:52:33] /usr/bin/top [ OK ]
[11:52:34] /usr/bin/touch [ OK ]
[11:52:34] /usr/bin/tr [ OK ]
[11:52:34] /usr/bin/uniq [ OK ]
[11:52:34] /usr/bin/users [ OK ]
[11:52:34] /usr/bin/vmstat [ OK ]
[11:52:34] /usr/bin/w [ OK ]
[11:52:34] /usr/bin/watch [ OK ]
[11:52:34] /usr/bin/wc [ OK ]
[11:52:34] /usr/bin/wget [ OK ]
[11:52:35] /usr/bin/whatis [ OK ]
[11:52:35] /usr/bin/whereis [ OK ]
[11:52:35] /usr/bin/which [ OK ]
[11:52:35] /usr/bin/who [ OK ]
[11:52:35] /usr/bin/whoami [ OK ]
[11:52:35] /usr/bin/gawk [ OK ]
[11:52:35] /usr/bin/bsd-mailx [ OK ]
[11:52:35] /usr/bin/w.procps [ OK ]
[11:52:36] /sbin/depmod [ OK ]
[11:52:36] /sbin/ifconfig [ OK ]
[11:52:36] /sbin/ifdown [ OK ]
[11:52:36] /sbin/ifup [ OK ]
[11:52:36] /sbin/init [ OK ]
[11:52:36] /sbin/insmod [ OK ]
[11:52:36] /sbin/ip [ OK ]
[11:52:36] /sbin/lsmod [ OK ]
[11:52:37] /sbin/modinfo [ OK ]
[11:52:37] /sbin/modprobe [ OK ]
[11:52:37] /sbin/rmmod [ OK ]
[11:52:37] /sbin/runlevel [ OK ]
[11:52:37] /sbin/sulogin [ OK ]
[11:52:37] /sbin/sysctl [ OK ]
[11:52:37] /sbin/syslogd [ OK ]
[11:52:38] /usr/sbin/adduser [ OK ]
[11:52:38] Info: Found file '/usr/sbin/adduser': it is whitelisted for the 'script replacement' check.
[11:52:38] /usr/sbin/chroot [ OK ]
[11:52:38] /usr/sbin/cron [ OK ]
[11:52:38] /usr/sbin/groupadd [ OK ]
[11:52:38] /usr/sbin/groupdel [ OK ]
[11:52:38] /usr/sbin/groupmod [ OK ]
[11:52:39] /usr/sbin/grpck [ OK ]
[11:52:39] /usr/sbin/nologin [ OK ]
[11:52:39] /usr/sbin/pwck [ OK ]
[11:52:39] /usr/sbin/tcpd [ OK ]
[11:52:39] /usr/sbin/unhide [ Warning ]
[11:52:39] Warning: The file '/usr/sbin/unhide' exists on the system, but it is not present in the rkhunter.dat file.
[11:52:39] /usr/sbin/useradd [ OK ]
[11:52:40] /usr/sbin/userdel [ OK ]
[11:52:40] /usr/sbin/usermod [ OK ]
[11:52:40] /usr/sbin/vipw [ OK ]
[11:52:40] /usr/sbin/unhide-linux26 [ Warning ]
[11:52:40] Warning: The file '/usr/sbin/unhide-linux26' exists on the system, but it is not present in the rkhunter.dat file.
[11:52:58]
[11:52:58] Checking for rootkits...
[11:52:58] Info: Starting test name 'rootkits'
[11:52:58]
[11:52:58] Performing check of known rootkit files and directories
[11:52:58] Info: Starting test name 'known_rkts'
[11:52:58]
[11:52:58] Checking for 55808 Trojan - Variant A...
[11:52:58] Checking for file '/tmp/.../r' [ Not found ]
[11:52:58] Checking for file '/tmp/.../a' [ Not found ]
[11:52:58] 55808 Trojan - Variant A [ Not found ]
[11:52:58]
[11:52:58] Checking for ADM Worm...
[11:52:58] Checking for string 'w0rm' [ Not found ]
[11:52:58] ADM Worm [ Not found ]
[11:52:59]
[11:52:59] Checking for AjaKit Rootkit...
[11:52:59] Checking for file '/dev/tux/.addr' [ Not found ]
[11:52:59] Checking for file '/dev/tux/.proc' [ Not found ]
[11:52:59] Checking for file '/dev/tux/.file' [ Not found ]
[11:52:59] Checking for file '/lib/.libgh-gh/cleaner' [ Not found ]
[11:52:59] Checking for file '/lib/.libgh-gh/Patch/patch' [ Not found ]
[11:52:59] Checking for file '/lib/.libgh-gh/sb0k' [ Not found ]
[11:52:59] Checking for directory '/dev/tux' [ Not found ]
[11:52:59] Checking for directory '/lib/.libgh-gh' [ Not found ]
[11:52:59] AjaKit Rootkit [ Not found ]
[11:52:59]
[11:52:59] Checking for aPa Kit...
[11:52:59] Checking for file '/usr/share/.aPa' [ Not found ]
[11:52:59] aPa Kit [ Not found ]
[11:52:59]
[11:52:59] Checking for Apache Worm...
[11:52:59] Checking for file '/bin/.log' [ Not found ]
[11:52:59] Apache Worm [ Not found ]
[11:52:59]
[11:52:59] Checking for Ambient (ark) Rootkit...
[11:52:59] Checking for file '/usr/lib/.ark?' [ Not found ]
[11:52:59] Checking for file '/dev/ptyxx/.log' [ Not found ]
[11:52:59] Checking for file '/dev/ptyxx/.file' [ Not found ]
[11:52:59] Checking for directory '/dev/ptyxx' [ Not found ]
[11:52:59] Ambient (ark) Rootkit [ Not found ]
[11:52:59]
[11:52:59] Checking for Balaur Rootkit...
[11:52:59] Checking for file '/usr/lib/liblog.o' [ Not found ]
[11:52:59] Checking for directory '/usr/lib/.kinetic' [ Not found ]
[11:52:59] Checking for directory '/usr/lib/.egcs' [ Not found ]
[11:53:00] Checking for directory '/usr/lib/.wormie' [ Not found ]
[11:53:00] Balaur Rootkit [ Not found ]
[11:53:00]
[11:53:00] Checking for BeastKit Rootkit...
[11:53:00] Checking for file '/usr/sbin/arobia' [ Not found ]
[11:53:00] Checking for file '/usr/sbin/idrun' [ Not found ]
[11:53:00] Checking for file '/usr/lib/elm/arobia/elm' [ Not found ]
[11:53:00] Checking for file '/usr/lib/elm/arobia/elm/hk' [ Not found ]
[11:53:00] Checking for file '/usr/lib/elm/arobia/elm/hk.pub' [ Not found ]
[11:53:00] Checking for file '/usr/lib/elm/arobia/elm/sc' [ Not found ]
[11:53:00] Checking for file '/usr/lib/elm/arobia/elm/sd.pp' [ Not found ]
[11:53:00] Checking for file '/usr/lib/elm/arobia/elm/sdco' [ Not found ]
[11:53:00] Checking for file '/usr/lib/elm/arobia/elm/srsd' [ Not found ]
[11:53:00] Checking for directory '/lib/ldd.so/bktools' [ Not found ]
[11:53:00] BeastKit Rootkit [ Not found ]
[11:53:00]
[11:53:00] Checking for beX2 Rootkit...
[11:53:00] Checking for directory '/usr/include/bex' [ Not found ]
[11:53:00] beX2 Rootkit [ Not found ]
[11:53:00]
[11:53:00] Checking for BOBKit Rootkit...
[11:53:00] Checking for file '/usr/sbin/ntpsx' [ Not found ]
[11:53:00] Checking for file '/usr/lib/.../ls' [ Not found ]
[11:53:00] Checking for file '/usr/lib/.../netstat' [ Not found ]
[11:53:00] Checking for file '/usr/lib/.../lsof' [ Not found ]
[11:53:00] Checking for file '/usr/lib/.../bkit-ssh/bkit-shdcfg' [ Not found ]
[11:53:00] Checking for file '/usr/lib/.../bkit-ssh/bkit-shhk' [ Not found ]
[11:53:00] Checking for file '/usr/lib/.../bkit-ssh/bkit-pw' [ Not found ]
[11:53:00] Checking for file '/usr/lib/.../bkit-ssh/bkit-shrs' [ Not found ]
[11:53:01] Checking for file '/usr/lib/.../uconf.inv' [ Not found ]
[11:53:01] Checking for file '/usr/lib/.../psr' [ Not found ]
[11:53:01] Checking for file '/usr/lib/.../find' [ Not found ]
[11:53:01] Checking for file '/usr/lib/.../pstree' [ Not found ]
[11:53:01] Checking for file '/usr/lib/.../slocate' [ Not found ]
[11:53:01] Checking for file '/usr/lib/.../du' [ Not found ]
[11:53:01] Checking for file '/usr/lib/.../top' [ Not found ]
[11:53:01] Checking for directory '/usr/lib/...' [ Not found ]
[11:53:01] Checking for directory '/usr/lib/.../bkit-ssh' [ Not found ]
[11:53:01] Checking for directory '/usr/lib/.bkit-' [ Not found ]
[11:53:01] Checking for directory '/tmp/.bkp' [ Not found ]
[11:53:01] BOBKit Rootkit [ Not found ]
[11:53:01]
[11:53:01] Checking for CiNIK Worm (Slapper.B variant)...
[11:53:01] Checking for file '/tmp/.cinik' [ Not found ]
[11:53:01] Checking for directory '/tmp/.font-unix/.cinik' [ Not found ]
[11:53:01] CiNIK Worm (Slapper.B variant) [ Not found ]
[11:53:01]
[11:53:01] Checking for Danny-Boy's Abuse Kit...
[11:53:01] Checking for file '/dev/mdev' [ Not found ]
[11:53:01] Checking for file '/usr/lib/libX.a' [ Not found ]
[11:53:01] Danny-Boy's Abuse Kit [ Not found ]
[11:53:01]
[11:53:01] Checking for Devil RootKit...
[11:53:01] Checking for file '/var/lib/games/.src' [ Not found ]
[11:53:01] Checking for file '/dev/dsx' [ Not found ]
[11:53:01] Checking for file '/dev/caca' [ Not found ]
[11:53:01] Devil RootKit [ Not found ]
[11:53:02]
[11:53:02] Checking for Dica-Kit Rootkit...
[11:53:02] Checking for file '/lib/.sso' [ Not found ]
[11:53:02] Checking for file '/lib/.so' [ Not found ]
[11:53:02] Checking for file '/var/run/...dica/clean' [ Not found ]
[11:53:02] Checking for file '/var/run/...dica/xl' [ Not found ]
[11:53:02] Checking for file '/var/run/...dica/xdr' [ Not found ]
[11:53:02] Checking for file '/var/run/...dica/psg' [ Not found ]
[11:53:02] Checking for file '/var/run/...dica/secure' [ Not found ]
[11:53:02] Checking for file '/var/run/...dica/rdx' [ Not found ]
[11:53:02] Checking for file '/var/run/...dica/va' [ Not found ]
[11:53:02] Checking for file '/var/run/...dica/cl.sh' [ Not found ]
[11:53:02] Checking for file '/usr/bin/.etc' [ Not found ]
[11:53:02] Checking for directory '/var/run/...dica' [ Not found ]
[11:53:02] Checking for directory '/var/run/...dica/mh' [ Not found ]
[11:53:02] Checking for directory '/var/run/...dica/scan' [ Not found ]
[11:53:02] Dica-Kit Rootkit [ Not found ]
[11:53:02]
[11:53:02] Checking for Dreams Rootkit...
[11:53:02] Checking for file '/dev/ttyoa' [ Not found ]
[11:53:02] Checking for file '/dev/ttyof' [ Not found ]
[11:53:02] Checking for file '/dev/ttyop' [ Not found ]
[11:53:02] Checking for file '/usr/bin/sense' [ Not found ]
[11:53:02] Checking for file '/usr/bin/sl2' [ Not found ]
[11:53:02] Checking for file '/usr/bin/logclear' [ Not found ]
[11:53:02] Checking for file '/usr/bin/(swapd)' [ Not found ]
[11:53:02] Checking for file '/usr/bin/snfs' [ Not found ]
[11:53:03] Checking for file '/usr/lib/libsss' [ Not found ]
[11:53:03] Checking for directory '/dev/ida/.hpd' [ Not found ]
[11:53:03] Dreams Rootkit [ Not found ]
[11:53:03]
[11:53:03] Checking for Duarawkz Rootkit...
[11:53:03] Checking for file '/usr/bin/duarawkz/loginpass' [ Not found ]
[11:53:03] Checking for directory '/usr/bin/duarawkz' [ Not found ]
[11:53:03] Duarawkz Rootkit [ Not found ]
[11:53:03]
[11:53:03] Checking for Enye LKM...
[11:53:03] Checking for file '/etc/.enyelkmHIDE^IT.ko' [ Not found ]
[11:53:03] Enye LKM [ Not found ]
[11:53:03]
[11:53:03] Checking for Flea Linux Rootkit...
[11:53:03] Checking for file '/etc/ld.so.hash' [ Not found ]
[11:53:03] Checking for file '/lib/security/.config/ssh/ssh_host_key' [ Not found ]
[11:53:03] Checking for file '/lib/security/.config/ssh/ssh_host_key.pub' [ Not found ]
[11:53:03] Checking for file '/lib/security/.config/ssh/ssh_random_seed' [ Not found ]
[11:53:03] Checking for file '/usr/bin/ssh2d' [ Not found ]
[11:53:03] Checking for file '/usr/lib/ldlibns.so' [ Not found ]
[11:53:03] Checking for file '/usr/lib/ldlibpst.so' [ Not found ]
[11:53:03] Checking for file '/usr/lib/ldlibdu.so' [ Not found ]
[11:53:03] Checking for file '/usr/lib/ldlibct.so' [ Not found ]
[11:53:03] Checking for directory '/lib/security/.config/ssh' [ Not found ]
[11:53:03] Checking for directory '/dev/..0' [ Not found ]
[11:53:03] Checking for directory '/dev/..0/backup' [ Not found ]
[11:53:03] Flea Linux Rootkit [ Not found ]
[11:53:03]
[11:53:03] Checking for FreeBSD Rootkit...
[11:53:03] Checking for file '/usr/lib/.fx/sched_host.2' [ Not found ]
[11:53:04] Checking for file '/usr/lib/.fx/random_d.2' [ Not found ]
[11:53:04] Checking for file '/usr/lib/.fx/set_pid.2' [ Not found ]
[11:53:04] Checking for file '/usr/lib/.fx/cons.saver' [ Not found ]
[11:53:04] Checking for file '/usr/lib/.fx/adore/adore/adore.ko' [ Not found ]
[11:53:04] Checking for file '/bin/sysback' [ Not found ]
[11:53:04] Checking for file '/usr/local/bin/sysback' [ Not found ]
[11:53:04] Checking for directory '/usr/lib/.fx' [ Not found ]
[11:53:04] Checking for directory '/usr/lib/.fx/adore' [ Not found ]
[11:53:04] FreeBSD Rootkit [ Not found ]
[11:53:04]
[11:53:04] Checking for Fuck`it Rootkit...
[11:53:04] Checking for file '/dev/proc/fuckit/hax0r' [ Not found ]
[11:53:04] Checking for file '/dev/proc/fuckit/hax0rshell' [ Not found ]
[11:53:04] Checking for file '/dev/proc/fuckit/config/lports' [ Not found ]
[11:53:04] Checking for file '/dev/proc/fuckit/config/rports' [ Not found ]
[11:53:04] Checking for file '/dev/proc/fuckit/config/rkconf' [ Not found ]
[11:53:04] Checking for file '/dev/proc/fuckit/config/password' [ Not found ]
[11:53:04] Checking for file '/dev/proc/fuckit/config/progs' [ Not found ]
[11:53:04] Checking for file '/dev/proc/system-bins/init' [ Not found ]
[11:53:04] Fuck`it Rootkit [ Not found ]
[11:53:04]
[11:53:04] Checking for GasKit Rootkit...
[11:53:04] Checking for file '/dev/dev/gaskit/sshd/sshdd' [ Not found ]
[11:53:04] Checking for directory '/dev/dev' [ Not found ]
[11:53:04] Checking for directory '/dev/dev/gaskit' [ Not found ]
[11:53:04] Checking for directory '/dev/dev/gaskit/sshd' [ Not found ]
[11:53:04] GasKit Rootkit [ Not found ]
[11:53:05]
[11:53:05] Checking for Heroin LKM...
[11:53:05] Checking for kernel symbol 'heroin' [ Not found ]
[11:53:05] Heroin LKM [ Not found ]
[11:53:05]
[11:53:05] Checking for HjC Kit...
[11:53:05] Checking for directory '/dev/.hijackerz' [ Not found ]
[11:53:05] HjC Kit [ Not found ]
[11:53:05]
[11:53:05] Checking for ignoKit Rootkit...
[11:53:05] Checking for file '/lib/defs/p' [ Not found ]
[11:53:05] Checking for file '/lib/defs/q' [ Not found ]
[11:53:05] Checking for file '/lib/defs/r' [ Not found ]
[11:53:05] Checking for file '/lib/defs/s' [ Not found ]
[11:53:05] Checking for file '/lib/defs/t' [ Not found ]
[11:53:05] Checking for file '/usr/lib/defs/p' [ Not found ]
[11:53:05] Checking for file '/usr/lib/defs/q' [ Not found ]
[11:53:05] Checking for file '/usr/lib/defs/r' [ Not found ]
[11:53:05] Checking for file '/usr/lib/defs/s' [ Not found ]
[11:53:05] Checking for file '/usr/lib/defs/t' [ Not found ]
[11:53:05] Checking for file '/usr/lib/.libigno/pkunsec' [ Not found ]
[11:53:05] Checking for file '/usr/lib/.libigno/.igno/psybnc/psybnc' [ Not found ]
[11:53:05] Checking for directory '/usr/lib/.libigno' [ Not found ]
[11:53:05] Checking for directory '/usr/lib/.libigno/.igno' [ Not found ]
[11:53:05] ignoKit Rootkit [ Not found ]
[11:53:05]
[11:53:05] Checking for ImperalsS-FBRK Rootkit...
[11:53:05] Checking for directory '/dev/fd/.88' [ Not found ]
[11:53:05] Checking for directory '/dev/fd/.99' [ Not found ]
[11:53:06] ImperalsS-FBRK Rootkit [ Not found ]
[11:53:06]
[11:53:06] Checking for Irix Rootkit...
[11:53:06] Checking for directory '/dev/pts/01' [ Not found ]
[11:53:06] Checking for directory '/dev/pts/01/backup' [ Not found ]
[11:53:06] Checking for directory '/dev/pts/01/etc' [ Not found ]
[11:53:06] Checking for directory '/dev/pts/01/tmp' [ Not found ]
[11:53:06] Irix Rootkit [ Not found ]
[11:53:06]
[11:53:06] Checking for Kitko Rootkit...
[11:53:06] Checking for directory '/usr/src/redhat/SRPMS/...' [ Not found ]
[11:53:06] Kitko Rootkit [ Not found ]
[11:53:06]
[11:53:06] Checking for Knark Rootkit...
[11:53:06] Checking for file '/proc/knark/pids' [ Not found ]
[11:53:06] Checking for directory '/proc/knark' [ Not found ]
[11:53:06] Knark Rootkit [ Not found ]
[11:53:06]
[11:53:06] Checking for Li0n Worm...
[11:53:06] Checking for file '/bin/in.telnetd' [ Not found ]
[11:53:06] Checking for file '/bin/mjy' [ Not found ]
[11:53:06] Checking for file '/usr/man/man1/man1/lib/.lib/mjy' [ Not found ]
[11:53:06] Checking for file '/usr/man/man1/man1/lib/.lib/in.telnetd' [ Not found ]
[11:53:06] Checking for file '/usr/man/man1/man1/lib/.lib/.x' [ Not found ]
[11:53:06] Checking for file '/dev/.lib/lib/scan/1i0n.sh' [ Not found ]
[11:53:06] Checking for file '/dev/.lib/lib/scan/hack.sh' [ Not found ]
[11:53:06] Checking for file '/dev/.lib/lib/scan/bind' [ Not found ]
[11:53:06] Checking for file '/dev/.lib/lib/scan/randb' [ Not found ]
[11:53:06] Checking for file '/dev/.lib/lib/scan/scan.sh' [ Not found ]
[11:53:07] Checking for file '/dev/.lib/lib/scan/pscan' [ Not found ]
[11:53:07] Checking for file '/dev/.lib/lib/scan/star.sh' [ Not found ]
[11:53:07] Checking for file '/dev/.lib/lib/scan/bindx.sh' [ Not found ]
[11:53:07] Checking for file '/dev/.lib/lib/scan/bindname.log' [ Not found ]
[11:53:07] Checking for file '/dev/.lib/lib/1i0n.sh' [ Not found ]
[11:53:07] Checking for file '/dev/.lib/lib/lib/netstat' [ Not found ]
[11:53:07] Checking for file '/dev/.lib/lib/lib/dev/.1addr' [ Not found ]
[11:53:07] Checking for file '/dev/.lib/lib/lib/dev/.1logz' [ Not found ]
[11:53:07] Checking for file '/dev/.lib/lib/lib/dev/.1proc' [ Not found ]
[11:53:07] Checking for file '/dev/.lib/lib/lib/dev/.1file' [ Not found ]
[11:53:07] Li0n Worm [ Not found ]
[11:53:07]
[11:53:07] Checking for Lockit / LJK2 Rootkit...
[11:53:07] Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_config' [ Not found ]
[11:53:07] Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_host_key' [ Not found ]
[11:53:07] Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_host_key.pub' [ Not found ]
[11:53:07] Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_random_seed*' [ Not found ]
[11:53:07] Checking for file '/usr/lib/libmen.oo/.LJK2/sshd_config' [ Not found ]
[11:53:07] Checking for file '/usr/lib/libmen.oo/.LJK2/backdoor/RK1bd' [ Not found ]
[11:53:07] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/du' [ Not found ]
[11:53:07] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ifconfig' [ Not found ]
[11:53:07] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/inetd.conf' [ Not found ]
[11:53:07] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/locate' [ Not found ]
[11:53:07] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/login' [ Not found ]
[11:53:07] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ls' [ Not found ]
[11:53:07] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/netstat' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ps' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/pstree' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/rc.sysinit' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/syslogd' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/tcpd' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/backup/top' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/clean/RK1sauber' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/clean/RK1wted' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/hack/RK1parser' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/hack/RK1sniff' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1addr' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1dir' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1log' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1proc' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/hide/RK1phidemod.c' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/modules/README.modules' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/modules/RK1hidem.c' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/modules/RK1phide' [ Not found ]
[11:53:08] Checking for file '/usr/lib/libmen.oo/.LJK2/sshconfig/RK1ssh' [ Not found ]
[11:53:08] Checking for directory '/usr/lib/libmen.oo/.LJK2' [ Not found ]
[11:53:08] Lockit / LJK2 Rootkit [ Not found ]
[11:53:08]
[11:53:08] Checking for Mood-NT Rootkit...
[11:53:08] Checking for file '/sbin/init__mood-nt-_-_cthulhu' [ Not found ]
[11:53:08] Checking for file '/_cthulhu/mood-nt.init' [ Not found ]
[11:53:08] Checking for file '/_cthulhu/mood-nt.conf' [ Not found ]
[11:53:09] Checking for file '/_cthulhu/mood-nt.sniff' [ Not found ]
[11:53:09] Checking for directory '/_cthulhu' [ Not found ]
[11:53:09] Mood-NT Rootkit [ Not found ]
[11:53:09]
[11:53:09] Checking for MRK Rootkit...
[11:53:09] Checking for file '/dev/ida/.inet/pid' [ Not found ]
[11:53:09] Checking for file '/dev/ida/.inet/ssh_host_key' [ Not found ]
[11:53:09] Checking for file '/dev/ida/.inet/ssh_random_seed' [ Not found ]
[11:53:09] Checking for file '/dev/ida/.inet/tcp.log' [ Not found ]
[11:53:09] Checking for directory '/dev/ida/.inet' [ Not found ]
[11:53:09] Checking for directory '/var/spool/cron/.sh' [ Not found ]
[11:53:09] MRK Rootkit [ Not found ]
[11:53:09]
[11:53:09] Checking for Ni0 Rootkit...
[11:53:09] Checking for file '/var/lock/subsys/...datafile.../...net...' [ Not found ]
[11:53:09] Checking for file '/var/lock/subsys/...datafile.../...port...' [ Not found ]
[11:53:09] Checking for file '/var/lock/subsys/...datafile.../...ps...' [ Not found ]
[11:53:09] Checking for file '/var/lock/subsys/...datafile.../...file...' [ Not found ]
[11:53:09] Checking for directory '/tmp/waza' [ Not found ]
[11:53:09] Checking for directory '/var/lock/subsys/...datafile...' [ Not found ]
[11:53:09] Checking for directory '/usr/sbin/es' [ Not found ]
[11:53:09] Ni0 Rootkit [ Not found ]
[11:53:09]
[11:53:09] Checking for Ohhara Rootkit...
[11:53:09] Checking for file '/var/lock/subsys/...datafile.../...datafile.../in.smbd.log' [ Not found ]
[11:53:09] Checking for directory '/var/lock/subsys/...datafile...' [ Not found ]
[11:53:09] Checking for directory '/var/lock/subsys/...datafile.../...datafile...' [ Not found ]
[11:53:09] Checking for directory '/var/lock/subsys/...datafile.../...datafile.../bin' [ Not found ]
[11:53:10] Checking for directory '/var/lock/subsys/...datafile.../...datafile.../usr/bin' [ Not found ]
[11:53:10] Checking for directory '/var/lock/subsys/...datafile.../...datafile.../usr/sbin' [ Not found ]
[11:53:10] Checking for directory '/var/lock/subsys/...datafile.../...datafile.../lib/security' [ Not found ]
[11:53:10] Ohhara Rootkit [ Not found ]
[11:53:10]
[11:53:10] Checking for Optic Kit (Tux) Worm...
[11:53:10] Checking for directory '/dev/tux' [ Not found ]
[11:53:10] Checking for directory '/usr/bin/xchk' [ Not found ]
[11:53:10] Checking for directory '/usr/bin/xsf' [ Not found ]
[11:53:10] Checking for directory '/usr/bin/ssh2d' [ Not found ]
[11:53:10] Optic Kit (Tux) Worm [ Not found ]
[11:53:10]
[11:53:10] Checking for Oz Rootkit...
[11:53:10] Checking for file '/dev/.oz/.nap/rkit/terror' [ Not found ]
[11:53:10] Checking for directory '/dev/.oz' [ Not found ]
[11:53:10] Oz Rootkit [ Not found ]
[11:53:10]
[11:53:10] Checking for Phalanx Rootkit...
[11:53:10] Checking for file '/usr/share/.home.ph1/cb' [ Not found ]
[11:53:10] Checking for file '/etc/host.ph1' [ Not found ]
[11:53:10] Checking for file '/bin/host.ph1' [ Not found ]
[11:53:10] Checking for file '/usr/share/.home.ph1/phalanx' [ Not found ]
[11:53:10] Checking for directory '/usr/share/.home.ph1' [ Not found ]
[11:53:10] Phalanx Rootkit [ Not found ]
[11:53:10]
[11:53:10] Checking for Phalanx Rootkit (strings)...
[11:53:10] Checking for string 'phalanx' [ Not found ]
[11:53:10] Phalanx Rootkit (strings) [ Not found ]
[11:53:10]
[11:53:10] Checking for Portacelo Rootkit...
[11:53:10] Checking for file '/var/lib/.../.ak' [ Not found ]
[11:53:11] Checking for file '/var/lib/.../.hk' [ Not found ]
[11:53:11] Checking for file '/var/lib/.../.rs' [ Not found ]
[11:53:11] Checking for file '/var/lib/.../.p' [ Not found ]
[11:53:11] Checking for file '/var/lib/.../getty' [ Not found ]
[11:53:11] Checking for file '/var/lib/.../lkt.o' [ Not found ]
[11:53:11] Checking for file '/var/lib/.../show' [ Not found ]
[11:53:11] Checking for file '/var/lib/.../nlkt.o' [ Not found ]
[11:53:11] Checking for file '/var/lib/.../ssshrc' [ Not found ]
[11:53:11] Checking for file '/var/lib/.../sssh_equiv' [ Not found ]
[11:53:11] Checking for file '/var/lib/.../sssh_known_hosts' [ Not found ]
[11:53:11] Checking for file '/var/lib/.../sssh_pid' [ Not found ]
[11:53:11] Checking for file '~/.sssh/known_hosts' [ Not found ]
[11:53:11] Portacelo Rootkit [ Not found ]
[11:53:11]
[11:53:11] Checking for R3dstorm Toolkit...
[11:53:11] Checking for file '/var/log/tk02/see_all' [ Not found ]
[11:53:11] Checking for file '/bin/.../sshd/sbin/sshd1' [ Not found ]
[11:53:11] Checking for file '/bin/.../hate/sk' [ Not found ]
[11:53:11] Checking for file '/bin/.../see_all' [ Not found ]
[11:53:11] Checking for directory '/var/log/tk02' [ Not found ]
[11:53:11] Checking for directory '/var/log/tk02/old' [ Not found ]
[11:53:11] Checking for directory '/bin/...' [ Not found ]
[11:53:11] R3dstorm Toolkit [ Not found ]
[11:53:11]
[11:53:11] Checking for RH-Sharpe's Rootkit...
[11:53:11] Checking for file '/bin/lps' [ Not found ]
[11:53:11] Checking for file '/usr/bin/lpstree' [ Not found ]
[11:53:11] Checking for file '/usr/bin/ltop' [ Not found ]
[11:53:12] Checking for file '/usr/bin/lkillall' [ Not found ]
[11:53:12] Checking for file '/usr/bin/ldu' [ Not found ]
[11:53:12] Checking for file '/usr/bin/lnetstat' [ Not found ]
[11:53:12] Checking for file '/usr/bin/wp' [ Not found ]
[11:53:12] Checking for file '/usr/bin/shad' [ Not found ]
[11:53:12] Checking for file '/usr/bin/vadim' [ Not found ]
[11:53:12] Checking for file '/usr/bin/slice' [ Not found ]
[11:53:12] Checking for file '/usr/bin/cleaner' [ Not found ]
[11:53:12] Checking for file '/usr/include/rpcsvc/du' [ Not found ]
[11:53:12] RH-Sharpe's Rootkit [ Not found ]
[11:53:12]
[11:53:12] Checking for RSHA's Rootkit...
[11:53:12] Checking for file '/bin/kr4p' [ Not found ]
[11:53:12] Checking for file '/usr/bin/n3tstat' [ Not found ]
[11:53:12] Checking for file '/usr/bin/chsh2' [ Not found ]
[11:53:12] Checking for file '/usr/bin/slice2' [ Not found ]
[11:53:12] Checking for file '/usr/src/linux/arch/alpha/lib/.lib/.1proc' [ Not found ]
[11:53:12] Checking for file '/etc/rc.d/arch/alpha/lib/.lib/.1addr' [ Not found ]
[11:53:12] Checking for directory '/etc/rc.d/rsha' [ Not found ]
[11:53:12] Checking for directory '/etc/rc.d/arch/alpha/lib/.lib' [ Not found ]
[11:53:12] RSHA's Rootkit [ Not found ]
[11:53:12]
[11:53:12] Checking for Scalper Worm...
[11:53:12] Checking for file '/tmp/.a' [ Not found ]
[11:53:12] Checking for file '/tmp/.uua' [ Not found ]
[11:53:12] Scalper Worm [ Not found ]
[11:53:13]
[11:53:13] Checking for Sebek LKM...
[11:53:13] Checking for kernel symbol 'adore or sebek' [ Not found ]
[11:53:13] Sebek LKM [ Not found ]
[11:53:13]
[11:53:13] Checking for Shutdown Rootkit...
[11:53:13] Checking for file '/usr/man/man5/.. /.dir/scannah/asus' [ Not found ]
[11:53:13] Checking for file '/usr/man/man5/.. /.dir/see' [ Not found ]
[11:53:13] Checking for file '/usr/man/man5/.. /.dir/nscd' [ Not found ]
[11:53:13] Checking for file '/usr/man/man5/.. /.dir/alpd' [ Not found ]
[11:53:13] Checking for file '/etc/rc.d/rc.local ' [ Not found ]
[11:53:13] Checking for directory '/usr/man/man5/.. /.dir' [ Not found ]
[11:53:13] Checking for directory '/usr/man/man5/.. /.dir/scannah' [ Not found ]
[11:53:13] Checking for directory '/etc/rc.d/rc0.d/.. /.dir' [ Not found ]
[11:53:13] Shutdown Rootkit [ Not found ]
[11:53:13]
[11:53:13] Checking for SHV4 Rootkit...
[11:53:13] Checking for file '/etc/ld.so.hash' [ Not found ]
[11:53:13] Checking for file '/lib/libext-2.so.7' [ Not found ]
[11:53:13] Checking for file '/lib/lidps1.so' [ Not found ]
[11:53:13] Checking for file '/usr/sbin/xntps' [ Not found ]
[11:53:13] Checking for directory '/lib/security/.config' [ Not found ]
[11:53:14] Checking for directory '/lib/security/.config/ssh' [ Not found ]
[11:53:14] SHV4 Rootkit [ Not found ]
[11:53:14]
[11:53:14] Checking for SHV5 Rootkit...
[11:53:14] Checking for file '/etc/sh.conf' [ Not found ]
[11:53:14] Checking for file '/dev/srd0' [ Not found ]
[11:53:14] Checking for directory '/usr/lib/libsh' [ Not found ]
[11:53:14] SHV5 Rootkit [ Not found ]
[11:53:14]
[11:53:14] Checking for Sin Rootkit...
[11:53:14] Checking for file '/dev/.haos/haos1/.f/Denyed' [ Not found ]
[11:53:14] Checking for file '/dev/ttyoa' [ Not found ]
[11:53:14] Checking for file '/dev/ttyof' [ Not found ]
[11:53:14] Checking for file '/dev/ttyop' [ Not found ]
[11:53:14] Checking for file '/dev/ttyos' [ Not found ]
[11:53:14] Checking for file '/usr/lib/.lib' [ Not found ]
[11:53:14] Checking for file '/usr/lib/sn/.X' [ Not found ]
[11:53:14] Checking for file '/usr/lib/sn/.sys' [ Not found ]
[11:53:14] Checking for file '/usr/lib/ld/.X' [ Not found ]
[11:53:14] Checking for file '/usr/man/man1/...' [ Not found ]
[11:53:14] Checking for file '/usr/man/man1/.../.m' [ Not found ]
[11:53:14] Checking for file '/usr/man/man1/.../.w' [ Not found ]
[11:53:14] Checking for directory '/usr/lib/sn' [ Not found ]
[11:53:14] Checking for directory '/usr/lib/man1/...' [ Not found ]
[11:53:14] Checking for directory '/dev/.haos' [ Not found ]
[11:53:14] Sin Rootkit [ Not found ]
[11:53:14]
[11:53:14] Checking for Slapper Worm...
[11:53:14] Checking for file '/tmp/.bugtraq' [ Not found ]
[11:53:15] Checking for file '/tmp/.uubugtraq' [ Not found ]
[11:53:15] Checking for file '/tmp/.bugtraq.c' [ Not found ]
[11:53:15] Checking for file '/tmp/httpd' [ Not found ]
[11:53:15] Checking for file '/tmp/.unlock' [ Not found ]
[11:53:15] Checking for file '/tmp/update' [ Not found ]
[11:53:15] Checking for file '/tmp/.cinik' [ Not found ]
[11:53:15] Checking for file '/tmp/.b' [ Not found ]
[11:53:15] Slapper Worm [ Not found ]
[11:53:15]
[11:53:15] Checking for Sneakin Rootkit...
[11:53:15] Checking for directory '/tmp/.X11-unix/.../rk' [ Not found ]
[11:53:15] Sneakin Rootkit [ Not found ]
[11:53:15]
[11:53:15] Checking for Suckit Rootkit...
[11:53:15] Checking for file '/sbin/initsk12' [ Not found ]
[11:53:15] Checking for file '/sbin/initxrk' [ Not found ]
[11:53:15] Checking for file '/usr/bin/null' [ Not found ]
[11:53:15] Checking for file '/usr/share/locale/sk/.sk12/sk' [ Not found ]
[11:53:15] Checking for file '/etc/rc.d/rc0.d/S23kmdac' [ Not found ]
[11:53:15] Checking for file '/etc/rc.d/rc1.d/S23kmdac' [ Not found ]
[11:53:15] Checking for file '/etc/rc.d/rc2.d/S23kmdac' [ Not found ]
[11:53:15] Checking for file '/etc/rc.d/rc3.d/S23kmdac' [ Not found ]
[11:53:15] Checking for file '/etc/rc.d/rc4.d/S23kmdac' [ Not found ]
[11:53:15] Checking for file '/etc/rc.d/rc5.d/S23kmdac' [ Not found ]
[11:53:15] Checking for file '/etc/rc.d/rc6.d/S23kmdac' [ Not found ]
[11:53:15] Checking for directory '/dev/sdhu0/tehdrakg' [ Not found ]
[11:53:15] Checking for directory '/etc/.MG' [ Not found ]
[11:53:16] Checking for directory '/usr/share/locale/sk/.sk12' [ Not found ]
[11:53:16] Checking for directory '/usr/lib/perl5/site_perl/i386-linux/auto/TimeDate/.packlist' [ Not found ]
[11:53:16] Suckit Rootkit [ Not found ]
[11:53:16]
[11:53:16] Checking for SunOS Rootkit...
[11:53:16] Checking for file '/etc/ld.so.hash' [ Not found ]
[11:53:16] Checking for file '/lib/libext-2.so.7' [ Not found ]
[11:53:16] Checking for file '/usr/bin/ssh2d' [ Not found ]
[11:53:16] Checking for file '/bin/xlogin' [ Not found ]
[11:53:16] Checking for file '/usr/lib/crth.o' [ Not found ]
[11:53:16] Checking for file '/usr/lib/crtz.o' [ Not found ]
[11:53:16] Checking for file '/sbin/login' [ Not found ]
[11:53:16] Checking for file '/lib/security/.config/sn' [ Not found ]
[11:53:16] Checking for file '/lib/security/.config/lpsched' [ Not found ]
[11:53:16] Checking for file '/dev/kmod' [ Not found ]
[11:53:16] Checking for file '/dev/dos' [ Not found ]
[11:53:16] SunOS Rootkit [ Not found ]
[11:53:16]
[11:53:16] Checking for SunOS / NSDAP Rootkit...
[11:53:16] Checking for file '/usr/lib/vold/nsdap/.kit' [ Not found ]
[11:53:16] Checking for file '/usr/lib/vold/nsdap/defines' [ Not found ]
[11:53:16] Checking for file '/usr/lib/vold/nsdap/patcher' [ Not found ]
[11:53:16] Checking for file '/usr/lib/vold/nsdap/pg' [ Not found ]
[11:53:16] Checking for file '/usr/lib/vold/nsdap/cleaner' [ Not found ]
[11:53:16] Checking for file '/usr/lib/vold/nsdap/utime' [ Not found ]
[11:53:16] Checking for file '/usr/lib/vold/nsdap/crypt' [ Not found ]
[11:53:16] Checking for file '/usr/lib/vold/nsdap/findkit' [ Not found ]
[11:53:16] Checking for file '/usr/lib/vold/nsdap/sn2' [ Not found ]
[11:53:17] Checking for file '/usr/lib/vold/nsdap/sniffload' [ Not found ]
[11:53:17] Checking for file '/usr/lib/vold/nsdap/runsniff' [ Not found ]
[11:53:17] Checking for file '/usr/lib/lpset' [ Not found ]
[11:53:17] Checking for directory '/usr/lib/vold/nsdap' [ Not found ]
[11:53:17] SunOS / NSDAP Rootkit [ Not found ]
[11:53:17]
[11:53:17] Checking for Superkit Rootkit...
[11:53:17] Checking for file '/usr/man/.sman/sk' [ Not found ]
[11:53:17] Superkit Rootkit [ Not found ]
[11:53:17]
[11:53:17] Checking for TBD (Telnet BackDoor)...
[11:53:17] Checking for file '/usr/lib/.tbd' [ Not found ]
[11:53:17] TBD (Telnet BackDoor) [ Not found ]
[11:53:17]
[11:53:17] Checking for TeLeKiT Rootkit...
[11:53:17] Checking for file '/usr/man/man3/.../TeLeKiT/bin/sniff' [ Not found ]
[11:53:17] Checking for file '/usr/man/man3/.../TeLeKiT/bin/telnetd' [ Not found ]
[11:53:17] Checking for file '/usr/man/man3/.../TeLeKiT/bin/teleulo' [ Not found ]
[11:53:17] Checking for file '/usr/man/man3/.../cl' [ Not found ]
[11:53:17] Checking for file '/dev/ptyr' [ Not found ]
[11:53:17] Checking for file '/dev/ptyp' [ Not found ]
[11:53:17] Checking for file '/dev/ptyq' [ Not found ]
[11:53:17] Checking for file '/dev/hda06' [ Not found ]
[11:53:17] Checking for file '/usr/info/libc1.so' [ Not found ]
[11:53:17] Checking for directory '/usr/man/man3/...' [ Not found ]
[11:53:17] Checking for directory '/usr/man/man3/.../lsniff' [ Not found ]
[11:53:17] Checking for directory '/usr/man/man3/.../TeLeKiT' [ Not found ]
[11:53:17] TeLeKiT Rootkit [ Not found ]
[11:53:18]
[11:53:18] Checking for T0rn Rootkit...
[11:53:18] Checking for file '/dev/.lib/lib/lib/t0rns' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/du' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/ls' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/t0rnsb' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/ps' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/t0rnp' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/find' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/ifconfig' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/pg' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/ssh.tgz' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/top' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/sz' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/login' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/in.fingerd' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/1i0n.sh' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/pstree' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/in.telnetd' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/mjy' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/sush' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/tfn' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/name' [ Not found ]
[11:53:18] Checking for file '/dev/.lib/lib/lib/getip.sh' [ Not found ]
[11:53:18] Checking for file '/usr/info/.torn/sh*' [ Not found ]
[11:53:19] Checking for file '/usr/src/.***/.1addr' [ Not found ]
[11:53:19] Checking for file '/usr/src/.***/.1file' [ Not found ]
[11:53:19] Checking for file '/usr/src/.***/.1proc' [ Not found ]
[11:53:19] Checking for file '/usr/src/.***/.1logz' [ Not found ]
[11:53:19] Checking for file '/usr/info/.t0rn' [ Not found ]
[11:53:19] Checking for directory '/dev/.lib' [ Not found ]
[11:53:19] Checking for directory '/dev/.lib/lib' [ Not found ]
[11:53:19] Checking for directory '/dev/.lib/lib/lib' [ Not found ]
[11:53:19] Checking for directory '/dev/.lib/lib/lib/dev' [ Not found ]
[11:53:19] Checking for directory '/dev/.lib/lib/scan' [ Not found ]
[11:53:19] Checking for directory '/usr/src/.***' [ Not found ]
[11:53:19] Checking for directory '/usr/man/man1/man1' [ Not found ]
[11:53:19] Checking for directory '/usr/man/man1/man1/lib' [ Not found ]
[11:53:19] Checking for directory '/usr/man/man1/man1/lib/.lib' [ Not found ]
[11:53:19] Checking for directory '/usr/man/man1/man1/lib/.lib/.backup' [ Not found ]
[11:53:19] T0rn Rootkit [ Not found ]
[11:53:19]
[11:53:19] Checking for Trojanit Kit...
[11:53:19] Checking for file '/bin/.ls' [ Not found ]
[11:53:19] Checking for file '/bin/.ps' [ Not found ]
[11:53:19] Checking for file '/bin/.netstat' [ Not found ]
[11:53:19] Checking for file '/usr/bin/.nop' [ Not found ]
[11:53:19] Checking for file '/usr/bin/.who' [ Not found ]
[11:53:19] Trojanit Kit [ Not found ]
[11:53:19]
[11:53:19] Checking for Tuxtendo Rootkit...
[11:53:19] Checking for file '/dev/tux/.addr' [ Not found ]
[11:53:20] Checking for file '/dev/tux/.cron' [ Not found ]
[11:53:20] Checking for file '/dev/tux/.file' [ Not found ]
[11:53:20] Checking for file '/dev/tux/.log' [ Not found ]
[11:53:20] Checking for file '/dev/tux/.proc' [ Not found ]
[11:53:20] Checking for file '/dev/tux/backup/crontab' [ Not found ]
[11:53:20] Checking for file '/dev/tux/backup/df' [ Not found ]
[11:53:20] Checking for file '/dev/tux/backup/dir' [ Not found ]
[11:53:20] Checking for file '/dev/tux/backup/find' [ Not found ]
[11:53:20] Checking for file '/dev/tux/backup/ifconfig' [ Not found ]
[11:53:20] Checking for file '/dev/tux/backup/locate' [ Not found ]
[11:53:20] Checking for file '/dev/tux/backup/netstat' [ Not found ]
[11:53:20] Checking for file '/dev/tux/backup/ps' [ Not found ]
[11:53:20] Checking for file '/dev/tux/backup/pstree' [ Not found ]
[11:53:20] Checking for file '/dev/tux/backup/syslogd' [ Not found ]
[11:53:20] Checking for file '/dev/tux/backup/tcpd' [ Not found ]
[11:53:20] Checking for file '/dev/tux/backup/top' [ Not found ]
[11:53:20] Checking for file '/dev/tux/backup/updatedb' [ Not found ]
[11:53:20] Checking for file '/dev/tux/backup/vdir' [ Not found ]
[11:53:20] Checking for directory '/dev/tux' [ Not found ]
[11:53:20] Checking for directory '/dev/tux/ssh2' [ Not found ]
[11:53:20] Checking for directory '/dev/tux/backup' [ Not found ]
[11:53:20] Tuxtendo Rootkit [ Not found ]
[11:53:20]
[11:53:20] Checking for URK Rootkit...
[11:53:20] Checking for file '/usr/man/man1/xxxxxxbin/find' [ Not found ]
[11:53:20] Checking for file '/usr/man/man1/xxxxxxbin/du' [ Not found ]
[11:53:21] Checking for file '/usr/man/man1/xxxxxxbin/ps' [ Not found ]
[11:53:21] Checking for file '/tmp/conf.inf' [ Not found ]
[11:53:21] Checking for directory '/usr/man/man1/xxxxxxbin' [ Not found ]
[11:53:21] URK Rootkit [ Not found ]
[11:53:21]
[11:53:21] Checking for VcKit Rootkit...
[11:53:21] Checking for directory '/usr/include/linux/modules/lib.so' [ Not found ]
[11:53:21] Checking for directory '/usr/include/linux/modules/lib.so/bin' [ Not found ]
[11:53:21] VcKit Rootkit [ Not found ]
[11:53:21]
[11:53:21] Checking for Volc Rootkit...
[11:53:21] Checking for directory '/var/spool/.recent' [ Not found ]
[11:53:21] Checking for directory '/var/spool/.recent/.files' [ Not found ]
[11:53:21] Checking for directory '/usr/lib/volc' [ Not found ]
[11:53:21] Checking for directory '/usr/lib/volc/backup' [ Not found ]
[11:53:21] Volc Rootkit [ Not found ]
[11:53:21]
[11:53:21] Checking for X-Org SunOS Rootkit...
[11:53:21] Checking for file '/usr/lib/libX.a/bin/tmpfl' [ Not found ]
[11:53:21] Checking for file '/usr/lib/libX.a/bin/rps' [ Not found ]
[11:53:21] Checking for file '/usr/bin/srload' [ Not found ]
[11:53:21] Checking for file '/usr/lib/libX.a/bin/sparcv7/rps' [ Not found ]
[11:53:21] Checking for file '/usr/sbin/modcheck' [ Not found ]
[11:53:21] Checking for directory '/usr/lib/libX.a' [ Not found ]
[11:53:21] Checking for directory '/usr/lib/libX.a/bin' [ Not found ]
[11:53:21] Checking for directory '/usr/lib/libX.a/bin/sparcv7' [ Not found ]
[11:53:21] Checking for directory '/usr/share/man...' [ Not found ]
[11:53:22] X-Org SunOS Rootkit [ Not found ]
[11:53:22]
[11:53:22] Checking for zaRwT.KiT Rootkit...
[11:53:22] Checking for file '/dev/rd/s/sendmeil' [ Not found ]
[11:53:22] Checking for file '/dev/ttyf' [ Not found ]
[11:53:22] Checking for file '/dev/ttyp' [ Not found ]
[11:53:22] Checking for file '/dev/ttyn' [ Not found ]
[11:53:22] Checking for file '/rk/tulz' [ Not found ]
[11:53:22] Checking for directory '/rk' [ Not found ]
[11:53:22] Checking for directory '/dev/rd/s' [ Not found ]
[11:53:22] zaRwT.KiT Rootkit [ Not found ]
[11:53:22]
[11:53:22] Performing additional rootkit checks
[11:53:22] Info: Starting test name 'additional_rkts'
[11:53:22]
[11:53:22] Performing Suckit Rookit additional checks
[11:53:22] Checking /sbin/init link count [ OK ]
[11:53:22] Checking for hidden file extensions [ None found ]
[11:53:22] Running skdet command [ Skipped ]
[11:53:22] Info: Unable to find the 'skdet' command
[11:53:22] Suckit Rookit additional checks [ OK ]
[11:53:22]
[11:53:22] Performing check of possible rootkit files and directories
[11:53:22] Info: Starting test name 'possible_rkt_files'
[11:53:22] Checking for file '/dev/sdr0' [ Not found ]
[11:53:22] Checking for file '/tmp/.syshackfile' [ Not found ]
[11:53:22] Checking for file '/tmp/.bash_history' [ Not found ]
[11:53:22] Checking for file '/usr/info/.clib' [ Not found ]
[11:53:22] Checking for file '/usr/sbin/tcp.log' [ Not found ]
[11:53:22] Checking for file '/usr/bin/take/pid' [ Not found ]
[11:53:23] Checking for file '/sbin/create' [ Not found ]
[11:53:23] Checking for file '/dev/ttypz' [ Not found ]
[11:53:23] Checking for directory '/usr/bin/take' [ Not found ]
[11:53:23] Checking for directory '/usr/src/.lib' [ Not found ]
[11:53:23] Checking for directory '/usr/share/man/man1/.1c' [ Not found ]
[11:53:23] Checking for directory '/lib/lblip.tk' [ Not found ]
[11:53:23] Checking for directory '/usr/sbin/...' [ Not found ]
[11:53:23] Checking for directory '/usr/share/.gun' [ Not found ]
[11:53:23] Checking for possible rootkit files and directories [ None found ]
[11:53:23]
[11:53:23] Performing check for possible rootkit strings
[11:53:23] Info: Starting test name 'possible_rkt_strings'
[11:53:23] Info: Found local startup file: /etc/rc.local
[11:53:23] Info: Found local startup file: /etc/inittab
[11:53:23] Checking for string '/dev/proc/fuckit' [ Not found ]
[11:53:23] Checking for string 'FUCK' [ Not found ]
[11:53:23] Checking for string 'backdoor' [ Not found ]
[11:53:23] Checking for string 'vt200' [ Not found ]
[11:53:23] Checking for string '/usr/bin/xstat' [ Not found ]
[11:53:23] Checking for string '/bin/envpc' [ Not found ]
[11:53:23] Checking for string 'L4m3r0x' [ Not found ]
[11:53:24] Checking for string '/usr/lib/.tbd' [ Not found ]
[11:53:24] Checking for string '/dev/ptyxx/.file' [ Not found ]
[11:53:24] Checking for string '/dev/sgk' [ Not found ]
[11:53:24] Checking for string '/var/lock/subsys/...datafile...' [ Not found ]
[11:53:24] Checking for string '/usr/lib/.tbd' [ Not found ]
[11:53:24] Checking for string '/dev/proc/fuckit' [ Not found ]
[11:53:24] Checking for string '/lib/.sso' [ Not found ]
[11:53:24] Checking for string '/var/lock/subsys/...datafile...' [ Not found ]
[11:53:24] Checking for string '/dev/caca' [ Not found ]
[11:53:24] Checking for string '/dev/ttyoa' [ Not found ]
[11:53:24] Checking for string 'syg' [ Not found ]
[11:53:24] Checking for string '/dev/pts/01' [ Not found ]
[11:53:24] Checking for string 'tw33dl3' [ Not found ]
[11:53:24] Checking for string 'psniff' [ Not found ]
[11:53:24] Checking for string '/var/lock/subsys/...datafile...' [ Not found ]
[11:53:24] Checking for string '/dev/ptyxx' [ Not found ]
[11:53:25] Checking for string 'promiscuous' [ Not found ]
[11:53:25] Checking for string '/usr/lib/.tbd' [ Not found ]
[11:53:25] Checking for string '/dev/xdta' [ Not found ]
[11:53:25] Checking for string '/usr/lib/.tbd' [ Not found ]
[11:53:25] Checking for string 'in.inetd' [ Not found ]
[11:53:25] Checking for string '#<HIDE_.*>' [ Not found ]
[11:53:25] Checking for string 'bin/xchk' [ Not found ]
[11:53:25] Checking for string 'bin/xsf' [ Not found ]
[11:53:25] Checking for possible rootkit strings [ None found ]
[11:53:25]
[11:53:25] Performing malware checks
[11:53:25] Info: Starting test name 'malware'
[11:53:25]
[11:53:25] Info: Test 'deleted_files' disabled at users request.
[11:53:25] Info: Starting test name 'running_procs'
[11:53:25] Checking running processes for suspicious files [ None found ]
[11:53:25]
[11:53:25] Info: Test 'hidden_procs' disabled at users request.
[11:53:25]
[11:53:25] Info: Test 'suspscan' disabled at users request.
[11:53:25]
[11:53:25] Performing check for login backdoors
[11:53:26] Info: Starting test name 'other_malware'
[11:53:26] Checking for '/bin/.login' [ Not found ]
[11:53:26] Checking for '/sbin/.login' [ Not found ]
[11:53:26] Checking for login backdoors [ None found ]
[11:53:26]
[11:53:26] Performing check for suspicious directories
[11:53:26] Checking for directory '/usr/X11R6/bin/.,/copy' [ Not found ]
[11:53:26] Checking for directory '/dev/rd/cdb' [ Not found ]
[11:53:26] Checking for suspicious directories [ None found ]
[11:53:26]
[11:53:26] Checking for software intrusions [ Skipped ]
[11:53:26] Info: Check skipped - tripwire not installed
[11:53:26]
[11:53:26] Performing check for sniffer log files
[11:53:26] Checking for file '/usr/lib/libice.log' [ Not found ]
[11:53:26] Checking for sniffer log files [ None found ]
[11:53:26]
[11:53:26] Performing trojan specific checks
[11:53:26] Info: Starting test name 'trojans'
[11:53:26] Checking for enabled inetd services [ Skipped ]
[11:53:26] Info: Check skipped - file '/etc/inetd.conf' does not exist.
[11:53:26]
[11:53:26] Performing check for enabled xinetd services
[11:53:26] Checking for enabled xinetd services [ Skipped ]
[11:53:26] Info: Check skipped - file '/etc/xinetd.conf' does not exist.
[11:53:26] Info: Apache backdoor check skipped: Apache modules and configuration directories not found.
[11:53:26]
[11:53:26] Performing Linux specific checks
[11:53:26] Info: Starting test name 'os_specific'
[11:53:26] Checking kernel module commands [ OK ]
[11:53:26] Info: Using modules pathname of '/lib/modules/2.6.24-epd'
[11:53:27] Checking kernel module names [ OK ]
[11:53:32]
[11:53:32] Checking the network...
[11:53:32] Info: Starting test name 'network'
[11:53:32] Info: Starting test name 'ports'
[11:53:32]
[11:53:32] Performing check for backdoor ports
[11:53:32] Checking for UDP port 2001 [ Not found ]
[11:53:33] Checking for TCP port 2006 [ Not found ]
[11:53:33] Checking for TCP port 2128 [ Not found ]
[11:53:33] Checking for TCP port 14856 [ Not found ]
[11:53:33] Checking for TCP port 47107 [ Not found ]
[11:53:33] Checking for TCP port 60922 [ Not found ]
[11:53:33]
[11:53:33] Performing checks on the network interfaces
[11:53:33] Info: Starting test name 'promisc'
[11:53:33] Checking for promiscuous interfaces [ None found ]
[11:53:33]
[11:53:33] Info: Test 'packet_cap_apps' disabled at users request.
[11:53:36]
[11:53:36] Checking the local host...
[11:53:36] Info: Starting test name 'local_host'
[11:53:36]
[11:53:36] Performing system boot checks
[11:53:36] Info: Starting test name 'startup_files'
[11:53:36] Checking for local host name [ Found ]
[11:53:36] Info: Starting test name 'startup_malware'
[11:53:36] Info: Found local startup file: /etc/rc.local
[11:53:36] Info: Found local startup file: /etc/inittab
[11:53:36] Checking for local startup files [ Found ]
[11:53:36] Checking local startup files for malware [ None found ]
[11:53:36] Info: Found system startup directory: /etc/init.d
[11:53:37] Checking system startup files for malware [ None found ]
[11:53:37]
[11:53:37] Performing group and account checks
[11:53:37] Info: Starting test name 'group_accounts'
[11:53:38] Checking for passwd file [ Found ]
[11:53:38] Info: Found password file: /etc/passwd
[11:53:38] Checking for root equivalent (UID 0) accounts [ None found ]
[11:53:38] Info: Found shadow file: /etc/shadow
[11:53:38] Checking for passwordless accounts [ None found ]
[11:53:38] Info: Starting test name 'passwd_changes'
[11:53:38] Checking for passwd file changes [ None found ]
[11:53:38] Info: Starting test name 'group_changes'
[11:53:38] Checking for group file changes [ None found ]
[11:53:38] Checking root account shell history files [ OK ]
[11:53:38]
[11:53:38] Performing system configuration file checks
[11:53:38] Info: Starting test name 'system_configs'
[11:53:38] Checking for SSH configuration file [ Found ]
[11:53:38] Info: Found SSH configuration file: /etc/ssh/sshd_config
[11:53:38] Info: Rkhunter option ALLOW_SSH_ROOT_USER set to 'no'.
[11:53:38] Info: Rkhunter option ALLOW_SSH_PROT_V1 set to '0'.
[11:53:38] Checking if SSH root access is allowed [ Warning ]
[11:53:38] Warning: The SSH and rkhunter configuration options should be the same:
[11:53:38] SSH configuration option 'PermitRootLogin': yes
[11:53:38] Rkhunter configuration option 'ALLOW_SSH_ROOT_USER': no
[11:53:38] Checking if SSH protocol v1 is allowed [ Not allowed ]
[11:53:38] Checking for running syslog daemon [ Found ]
[11:53:38] Checking for syslog configuration file [ Found ]
[11:53:38] Info: Found syslog configuration file: /etc/syslog.conf
[11:53:39] Checking if syslog remote logging is allowed [ Not allowed ]
[11:53:39]
[11:53:39] Performing filesystem checks
[11:53:39] Info: Starting test name 'filesystem'
[11:53:39] Info: SCAN_MODE_DEV set to 'THOROUGH'
[11:53:39] Checking /dev for suspicious file types [ Warning ]
[11:53:39] Warning: Suspicious file types found in /dev:
[11:53:39] /dev/shm/network/ifstate: ASCII text
[11:53:40] Checking for hidden files and directories [ None found ]
[11:53:50]
[11:53:50] Checking application versions...
[11:53:50] Info: Starting test name 'apps'
[11:53:50] Checking version of Exim MTA [ OK ]
[11:53:50] Info: Application 'exim' version '4.69' found.
[11:53:50] Checking version of GnuPG [ OK ]
[11:53:51] Info: Application 'gpg' version '1.4.6' found.
[11:53:51] Info: Application 'httpd' not found.
[11:53:51] Info: Application 'named' not found.
[11:53:51] Checking version of OpenSSL [ OK ]
[11:53:51] Info: Application 'openssl' version '0.9.8g' found.
[11:53:51] Info: Application 'php' not found.
[11:53:51] Checking version of Procmail MTA [ OK ]
[11:53:51] Info: Application 'procmail' version '3.22' found.
[11:53:51] Info: Application 'proftpd' not found.
[11:53:51] Checking version of OpenSSH [ OK ]
[11:53:51] Info: Application 'sshd' version '4.7p1' found.
[11:53:51] Info: Applications checked: 5 out of 9
[11:53:51]
[11:53:51] System checks summary
[11:53:51] =====================
[11:53:51]
[11:53:51] File properties checks...
[11:53:51] Files checked: 120
[11:53:51] Suspect files: 2
[11:53:51]
[11:53:51] Rootkit checks...
[11:53:51] Rootkits checked : 110
[11:53:51] Possible rootkits: 0
[11:53:51]
[11:53:51] Applications checks...
[11:53:51] Applications checked: 5
[11:53:51] Suspect applications: 0
Abraços.
|
| Seg Jan 12, 2009 1:05 pm |
|
 |
|
Desenvolvedor
Data de registro: Ter Mar 13, 2007 7:58 am Mensagens: 1893
|
Oi antonio,
Parece que os avisos que você está recebendo estão relacionados com o programam unhide que foi adicionado a algum tempo no Debian, mas ainda não foram feitas as alterações necessárias no rkhunter. Você pode confirmar isto nesta mensagem.
Citação: [11:52:39] /usr/sbin/unhide [ Warning ] [11:52:39] Warning: The file '/usr/sbin/unhide' exists on the system, but it is not present in the rkhunter.dat file. [11:52:39] /usr/sbin/useradd [ OK ] [11:52:40] /usr/sbin/userdel [ OK ] [11:52:40] /usr/sbin/usermod [ OK ] [11:52:40] /usr/sbin/vipw [ OK ] [11:52:40] /usr/sbin/unhide-linux26 [ Warning ] [11:52:40] Warning: The file '/usr/sbin/unhide-linux26' exists on the system, but it is not present in the rkhunter.dat file. Outro arquivo que está gerando um aviso é o ifstate, mas este arquivo está no diretório /dev/shm, que assim como o diretório /tmp é muito propício para a geração de falsos positivos, já que muitos programas criam arquivos como nomes aleatórios nestes diretórios e o rkhunter não tem como saber quais nomes serão usados. Você pode conferir uma discussão sobre isto aqui. Citação: [11:53:39] Checking /dev for suspicious file types [ Warning ] [11:53:39] Warning: Suspicious file types found in /dev: [11:53:39] /dev/shm/network/ifstate: ASCII text Para corrigir o problema com o programa unhide, você pode usar o comando Código: rkhunter --propupd Que atualiza as informações do rkhunter. Já para corrigir o problema com o ifstate você precisa acrescentar a linha Citação: ALLOWDEVFILE=/dev/shm/network/ifstate logo após o bloco Citação: # # Allow the specified files to be present in the /dev directory, # and not regarded as suspicious. One file per line (use multiple # ALLOWDEVFILE lines). # #ALLOWDEVFILE=/dev/abc #ALLOWDEVFILE=/dev/shm/pulse-shm-* no arquivo /etc/rkhunter.conf Feito isso, você pode fazer de novo o teste com o comando
Que os avisos devem desaparecer.
Abraços,
James.
_________________
|
| Ter Jan 13, 2009 11:15 am |
|
 |
|
Epidemic Usuário
Data de registro: Sáb Fev 02, 2008 7:08 pm Mensagens: 110
|
Oi James, muito obrigado pela informação  , como sempre você é muito bacana com a gente  .
Abraços.
|
| Ter Jan 13, 2009 2:26 pm |
|
|
|
Página 1 de 1
|
[ 10 Mensagens ] |
|
Quem está online |
Usuários vendo este fórum: Nenhum usuário registrado online e 1 visitante |
|
Você não pode criar novos tópicos neste fórum Você não pode responder tópicos neste fórum Você não pode editar suas mensagens neste fórum Você não pode excluir suas mensagens neste fórum Você não pode enviar anexos neste fórum
|
|
 |