由买买提看人间百态

boards

本页内容为未名空间相应帖子的节选和存档，一周内的贴子最多显示50字，超过一周显示500字 访问原贴
Linux版 - 请高手帮忙看看这个chkrootkit安全否？
相关主题
● OS war: linux vs windows● VoIP 打不出去了，跟换了个路由器有关系吗？
● 苹果难道不是已经往Linux里渗透了？● chinese fonts in gentoo
● 觉得这里专业,懂的人多些,发到这里.----"问一下 路由器的问题...和室友公用一个网."● 怎么吧一个目录下的所有文件名改成大写？
● Solution: Ubuntu上安装Windows网络打印机● scp 选择性的转移某些文件，怎么操作？
● 泥马坑爹的tcp stack的作者● still can not install debian normally on dockstar
● fstab里面users和uid,gid不能一起用吗？● bourne shell 问题
● REHL5 的 samba 突然不管用了● 问一下 .aa 扩展名镜象文件用什么软件还原
● linux下哪个看图软件最好？● linux下如何search Windows XP里的文件？
相关话题的讨论汇总
话题: checking话题: searching话题: found话题: infected话题: lib
进入Linux版参与讨论
1 (共1页)
g****e
发帖数: 172
1
那些suspicious files安全吗？
多谢！！
sudo chkrootkit
ROOTDIR is `/'
Checking `amd'... not found
Checking `basename'... not infected
Checking `biff'... not found
Checking `chfn'... not infected
Checking `chsh'... not infected
Checking `cron'... not infected
Checking `crontab'... not infected
Checking `date'... not infected
Checking `du'... not infected
Checking `dirname'... not infected
Checking `echo'... not infected
Checking `egrep'... not infected
Checking `env'... not infected
Checking `find'... not infected
Checking `fingerd'... not found
Checking `gpm'... not found
Checking `grep'... not infected
Checking `hdparm'... not infected
Checking `su'... not infected
Checking `ifconfig'... not infected
Checking `inetd'... not infected
Checking `inetdconf'... not found
Checking `identd'... not found
Checking `init'... not infected
Checking `killall'... not infected
Checking `ldsopreload'... not infected
Checking `login'... not infected
Checking `ls'... not infected
Checking `lsof'... not infected
Checking `mail'... not found
Checking `mingetty'... not found
Checking `netstat'... not infected
Checking `named'... not found
Checking `passwd'... not infected
Checking `pidof'... not infected
Checking `pop2'... not found
Checking `pop3'... not found
Checking `ps'... not infected
Checking `pstree'... not infected
Checking `rpcinfo'... not found
Checking `rlogind'... not found
Checking `rshd'... not found
Checking `slogin'... not infected
Checking `sendmail'... not infected
Checking `sshd'... not found
Checking `syslogd'... not tested
Checking `tar'... not infected
Checking `tcpd'... not infected
Checking `tcpdump'... not infected
Checking `top'... not infected
Checking `telnetd'... not found
Checking `timed'... not found
Checking `traceroute'... not found
Checking `vdir'... not infected
Checking `w'... not infected
Checking `write'... not infected
Checking `aliens'... no suspect files
Searching for sniffer's logs, it may take a while... nothing found
Searching for rootkit HiDrootkit's default files... nothing found
Searching for rootkit t0rn's default files... nothing found
Searching for t0rn's v8 defaults... nothing found
Searching for rootkit Lion's default files... nothing found
Searching for rootkit RSHA's default files... nothing found
Searching for rootkit RH-Sharpe's default files... nothing found
Searching for Ambient's rootkit (ark) default files and dirs... nothing
found
Searching for suspicious files and dirs, it may take a while... The
following suspicious files and directories were found:
/usr/lib/jupiter/kernel/.svn /usr/lib/jupiter/.svn /usr/lib/jupiter/scripts/
.svn /usr/lib/jvm/.java-gcj-4.6.jinfo /usr/lib/jvm/java-7-oracle/lib/
visualvm/platform/.lastModified /usr/lib/jvm/java-7-oracle/lib/visualvm/
profiler/.lastModified /usr/lib/jvm/java-7-oracle/lib/visualvm/visualvm/.
lastModified /usr/lib/jvm/.java-1.6.0-openjdk-amd64.jinfo /usr/lib/jvm/.java
-7-oracle.jinfo /usr/lib/pymodules/python2.7/.path /usr/lib/eclipse/.
eclipseproduct /usr/lib/eclipse/configuration/org.eclipse.osgi/bundles/28/1/
.cp /usr/lib/eclipse/dropins/sdk/plugins/org.eclipse.pde.build_3.7.0.dist/.
options /usr/lib/eclipse/dropins/sdk/plugins/org.eclipse.pde.build_3.7.0.
dist/.api_description /usr/lib/eclipse/dropins/jdt/plugins/org.eclipse.jdt.
debug_3.7.1.dist/.api_description /usr/lib/eclipse/plugins/org.eclipse.core.
runtime.compatibility.registry_3.5.0.dist/.api_description /usr/lib/eclipse/
plugins/org.eclipse.ui.workbench.compatibility_3.2.100.dist/.api_description
/usr/lib/eclipse/plugins/org.eclipse.ui.intro.universal_3.2.500.dist/.
options /usr/lib/eclipse/plugins/org.eclipse.ui.intro.universal_3.2.500.dist
/.api_description /usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/
profileRegistry/PlatformProfile.profile/.data /usr/lib/eclipse/p2/org.
eclipse.equinox.p2.engine/profileRegistry/PlatformProfile.profile/.data/.
settings /usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/profileRegistry/
PlatformProfile.profile/.lock /usr/lib/eclipse/p2/org.eclipse.equinox.p2.
engine/.settings /usr/lib/python2.7/dist-packages/PyQt4/uic/widget-plugins/.
noinit /usr/lib/mono/xbuild-frameworks/.NETFramework
/usr/lib/jupiter/kernel/.svn /usr/lib/jupiter/.svn /usr/lib/jupiter/scripts/
.svn /usr/lib/eclipse/configuration/org.eclipse.osgi/bundles/28/1/.cp /usr/
lib/eclipse/p2/org.eclipse.equinox.p2.engine/profileRegistry/PlatformProfile
.profile/.data /usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/
profileRegistry/PlatformProfile.profile/.data/.settings /usr/lib/eclipse/p2/
org.eclipse.equinox.p2.engine/.settings /usr/lib/mono/xbuild-frameworks/.
NETFramework
Searching for LPD Worm files and dirs... nothing found
Searching for Ramen Worm files and dirs... nothing found
Searching for Maniac files and dirs... nothing found
Searching for RK17 files and dirs... nothing found
Searching for Ducoci rootkit... nothing found
Searching for Adore Worm... nothing found
Searching for ShitC Worm... nothing found
Searching for Omega Worm... nothing found
Searching for Sadmind/IIS Worm... nothing found
Searching for MonKit... nothing found
Searching for Showtee... nothing found
Searching for OpticKit... nothing found
Searching for T.R.K... nothing found
Searching for Mithra... nothing found
Searching for LOC rootkit... nothing found
Searching for Romanian rootkit... nothing found
Searching for Suckit rootkit... nothing found
Searching for Volc rootkit... nothing found
Searching for Gold2 rootkit... nothing found
Searching for TC2 Worm default files and dirs... nothing found
Searching for Anonoying rootkit default files and dirs... nothing found
Searching for ZK rootkit default files and dirs... nothing found
Searching for ShKit rootkit default files and dirs... nothing found
Searching for AjaKit rootkit default files and dirs... nothing found
Searching for zaRwT rootkit default files and dirs... nothing found
Searching for Madalin rootkit default files... nothing found
Searching for Fu rootkit default files... nothing found
Searching for ESRK rootkit default files... nothing found
Searching for rootedoor... nothing found
Searching for ENYELKM rootkit default files... nothing found
Searching for common ssh-scanners default files... nothing found
Searching for suspect PHP files... nothing found
Searching for anomalies in shell history files... nothing found
Checking `asp'... not infected
Checking `bindshell'... not infected
Checking `lkm'... chkproc: nothing
detected
chkdirs: nothing detected
Checking `rexedcs'... not found
Checking `sniffer'... lo: not promisc
and no packet sniffer sockets
wlan0: PACKET SNIFFER(/sbin/wpa_supplicant[900], /sbin/dhclient[4200])
Checking `w55808'... not infected
Checking `wted'... chkwtmp: nothing
deleted
Checking `scalper'... not infected
Checking `slapper'... not infected
Checking `z2'... user gengwg
deleted or never logged from lastlog!
Checking `chkutmp'... chkutmp: nothing
deleted
Checking `OSX_RSPLUG'... not infected
sudo chkrootkit
ROOTDIR is `/'
Checking `amd'... not found
Checking `basename'... not infected
Checking `biff'... not found
Checking `chfn'... not infected
Checking `chsh'... not infected
Checking `cron'... not infected
Checking `crontab'... not infected
Checking `date'... not infected
Checking `du'... not infected
Checking `dirname'... not infected
Checking `echo'... not infected
Checking `egrep'... not infected
Checking `env'... not infected
Checking `find'... not infected
Checking `fingerd'... not found
Checking `gpm'... not found
Checking `grep'... not infected
Checking `hdparm'... not infected
Checking `su'... not infected
Checking `ifconfig'... not infected
Checking `inetd'... not infected
Checking `inetdconf'... not found
Checking `identd'... not found
Checking `init'... not infected
Checking `killall'... not infected
Checking `ldsopreload'... not infected
Checking `login'... not infected
Checking `ls'... not infected
Checking `lsof'... not infected
Checking `mail'... not found
Checking `mingetty'... not found
Checking `netstat'... not infected
Checking `named'... not found
Checking `passwd'... not infected
Checking `pidof'... not infected
Checking `pop2'... not found
Checking `pop3'... not found
Checking `ps'... not infected
Checking `pstree'... not infected
Checking `rpcinfo'... not found
Checking `rlogind'... not found
Checking `rshd'... not found
Checking `slogin'... not infected
Checking `sendmail'... not infected
Checking `sshd'... not found
Checking `syslogd'... not tested
Checking `tar'... not infected
Checking `tcpd'... not infected
Checking `tcpdump'... not infected
Checking `top'... not infected
Checking `telnetd'... not found
Checking `timed'... not found
Checking `traceroute'... not found
Checking `vdir'... not infected
Checking `w'... not infected
Checking `write'... not infected
Checking `aliens'... no suspect files
Searching for sniffer's logs, it may take a while... nothing found
Searching for rootkit HiDrootkit's default files... nothing found
Searching for rootkit t0rn's default files... nothing found
Searching for t0rn's v8 defaults... nothing found
Searching for rootkit Lion's default files... nothing found
Searching for rootkit RSHA's default files... nothing found
Searching for rootkit RH-Sharpe's default files... nothing found
Searching for Ambient's rootkit (ark) default files and dirs... nothing
found
Searching for suspicious files and dirs, it may take a while... The
following suspicious files and directories were found:
/usr/lib/jupiter/kernel/.svn /usr/lib/jupiter/.svn /usr/lib/jupiter/scripts/
.svn /usr/lib/jvm/.java-gcj-4.6.jinfo /usr/lib/jvm/java-7-oracle/lib/
visualvm/platform/.lastModified /usr/lib/jvm/java-7-oracle/lib/visualvm/
profiler/.lastModified /usr/lib/jvm/java-7-oracle/lib/visualvm/visualvm/.
lastModified /usr/lib/jvm/.java-1.6.0-openjdk-amd64.jinfo /usr/lib/jvm/.java
-7-oracle.jinfo /usr/lib/pymodules/python2.7/.path /usr/lib/eclipse/.
eclipseproduct /usr/lib/eclipse/configuration/org.eclipse.osgi/bundles/28/1/
.cp /usr/lib/eclipse/dropins/sdk/plugins/org.eclipse.pde.build_3.7.0.dist/.
options /usr/lib/eclipse/dropins/sdk/plugins/org.eclipse.pde.build_3.7.0.
dist/.api_description /usr/lib/eclipse/dropins/jdt/plugins/org.eclipse.jdt.
debug_3.7.1.dist/.api_description /usr/lib/eclipse/plugins/org.eclipse.core.
runtime.compatibility.registry_3.5.0.dist/.api_description /usr/lib/eclipse/
plugins/org.eclipse.ui.workbench.compatibility_3.2.100.dist/.api_description
/usr/lib/eclipse/plugins/org.eclipse.ui.intro.universal_3.2.500.dist/.
options /usr/lib/eclipse/plugins/org.eclipse.ui.intro.universal_3.2.500.dist
/.api_description /usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/
profileRegistry/PlatformProfile.profile/.data /usr/lib/eclipse/p2/org.
eclipse.equinox.p2.engine/profileRegistry/PlatformProfile.profile/.data/.
settings /usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/profileRegistry/
PlatformProfile.profile/.lock /usr/lib/eclipse/p2/org.eclipse.equinox.p2.
engine/.settings /usr/lib/python2.7/dist-packages/PyQt4/uic/widget-plugins/.
noinit /usr/lib/mono/xbuild-frameworks/.NETFramework
/usr/lib/jupiter/kernel/.svn /usr/lib/jupiter/.svn /usr/lib/jupiter/scripts/
.svn /usr/lib/eclipse/configuration/org.eclipse.osgi/bundles/28/1/.cp /usr/
lib/eclipse/p2/org.eclipse.equinox.p2.engine/profileRegistry/PlatformProfile
.profile/.data /usr/lib/eclipse/p2/org.eclipse.equinox.p2.engine/
profileRegistry/PlatformProfile.profile/.data/.settings /usr/lib/eclipse/p2/
org.eclipse.equinox.p2.engine/.settings /usr/lib/mono/xbuild-frameworks/.
NETFramework
Searching for LPD Worm files and dirs... nothing found
Searching for Ramen Worm files and dirs... nothing found
Searching for Maniac files and dirs... nothing found
Searching for RK17 files and dirs... nothing found
Searching for Ducoci rootkit... nothing found
Searching for Adore Worm... nothing found
Searching for ShitC Worm... nothing found
Searching for Omega Worm... nothing found
Searching for Sadmind/IIS Worm... nothing found
Searching for MonKit... nothing found
Searching for Showtee... nothing found
Searching for OpticKit... nothing found
Searching for T.R.K... nothing found
Searching for Mithra... nothing found
Searching for LOC rootkit... nothing found
Searching for Romanian rootkit... nothing found
Searching for Suckit rootkit... nothing found
Searching for Volc rootkit... nothing found
Searching for Gold2 rootkit... nothing found
Searching for TC2 Worm default files and dirs... nothing found
Searching for Anonoying rootkit default files and dirs... nothing found
Searching for ZK rootkit default files and dirs... nothing found
Searching for ShKit rootkit default files and dirs... nothing found
Searching for AjaKit rootkit default files and dirs... nothing found
Searching for zaRwT rootkit default files and dirs... nothing found
Searching for Madalin rootkit default files... nothing found
Searching for Fu rootkit default files... nothing found
Searching for ESRK rootkit default files... nothing found
Searching for rootedoor... nothing found
Searching for ENYELKM rootkit default files... nothing found
Searching for common ssh-scanners default files... nothing found
Searching for suspect PHP files... nothing found
Searching for anomalies in shell history files... nothing found
Checking `asp'... not infected
Checking `bindshell'... not infected
Checking `lkm'... chkproc: nothing
detected
chkdirs: nothing detected
Checking `rexedcs'... not found
Checking `sniffer'... lo: not promisc
and no packet sniffer sockets
wlan0: PACKET SNIFFER(/sbin/wpa_supplicant[900], /sbin/dhclient[4200])
Checking `w55808'... not infected
Checking `wted'... chkwtmp: nothing
deleted
Checking `scalper'... not infected
Checking `slapper'... not infected
Checking `z2'... user xxxx
deleted or never logged from lastlog!
Checking `chkutmp'... chkutmp: nothing
deleted
Checking `OSX_RSPLUG'... not infected
g****e
发帖数: 172
2
rkhunter的红色的：
/usr/bin/unhide.rb [ Warning ]
Checking for hidden files and directories [ Warning ]

【在 g****e 的大作中提到】
: 那些suspicious files安全吗？
: 多谢！！
: sudo chkrootkit
: ROOTDIR is `/'
: Checking `amd'... not found
: Checking `basename'... not infected
: Checking `biff'... not found
: Checking `chfn'... not infected
: Checking `chsh'... not infected
: Checking `cron'... not infected
1 (共1页)
进入Linux版参与讨论
相关主题
● linux下如何search Windows XP里的文件？● 泥马坑爹的tcp stack的作者
● 问个土问题● fstab里面users和uid,gid不能一起用吗？
● Search Engine Blind Test● REHL5 的 samba 突然不管用了
● Linux Desktop search tools● linux下哪个看图软件最好？
● OS war: linux vs windows● VoIP 打不出去了，跟换了个路由器有关系吗？
● 苹果难道不是已经往Linux里渗透了？● chinese fonts in gentoo
● 觉得这里专业,懂的人多些,发到这里.----"问一下 路由器的问题...和室友公用一个网."● 怎么吧一个目录下的所有文件名改成大写？
● Solution: Ubuntu上安装Windows网络打印机● scp 选择性的转移某些文件，怎么操作？
相关话题的讨论汇总
话题: checking话题: searching话题: found话题: infected话题: lib

未名新帖统计// 7月16日

#版面帖数(主题数)
-全站4871 (796)
1Military3777 (569)
2Stock341 (51)
3Joke117 (17)
4History116 (3)
5Automobile100 (9)
6USANews55 (9)
7Midlife45 (1)
8Headline41 (41)
9Dreamer33 (13)
10FleaMarket32 (20)
11Living30 (7)

* 这里只显示发帖超过25的版面，努力灌水吧:-)

历史上的今天

  1. faintcat妹妹看进来～～ 发表于12年前.
  2. NSC, PD 1/7/2007, EB2, ... 发表于11年前.
  3. [FBA求购]MJVE2 758 MJVM2 ... 发表于6年前.
  4. 老生常谈,归与不归 发表于10年前.
  5. 【申请】Seattle西雅图 版版主——申请人... 发表于9年前.
  6. 宝宝出生，头骨骨折，求祝福 发表于9年前.
  7. 求推荐舒缓优美的古典音乐 发表于11年前.
  8. 百分之一的北京人上北大 中国网友愤怒(转载） 发表于10年前.
  9. 新人带狗狗Bailey来报道 发表于12年前.
  10. 全世界最有价值的运动队 发表于10年前.
  11. 请问大切诺基的质量如何 发表于6年前.
  12. TNND，军版全是BKC 发表于15年前.
  13. Inception 发表于12年前.
  14. 微软的有些家属可真恶心，为了卖保险脸都不要了 发表于10年前.
  15. 每周坐高铁的苦逼来说说感受吧!! 发表于9年前.
除非另有声明，本站内容采用Creative Commons BY-NC-SA 3.0协议进行许可，转载请注明来自未名观察 - 隐私政策2011-07-24 10:06:12由admin编辑