I regulary scan my cPanel servers for trojans, and I always get a small list of possible trojans. Of some of those I'm sure that they're not trojans, but I'm not 100% sure about some. It's not like I have been having _any_ problems at all, but for security matters I need to be absolutely sure that I haven't got any trojans at my servers.
Does anyone know how I can find out if those possible trojans are real trojans?
Thanks,
Apoc
VNPIXEL
04-09-2003, 04:14 PM
don't worry about. It just cpanel thing.
Mark_TVI
04-09-2003, 04:22 PM
Post the information of those items you are questioning. Perhaps some light could be shed on them.
Originally posted by VNPIXEL
don't worry about. It just cpanel thing.
I know, but cPanel doesn't have that function for nothing. IF I ever get a trojan for whatever reason, it will display it, and then if I ignore it now, I'd ignore it then as well.
Due to some reasons I can't post that list here. But are there any specific signs that something could be a trojan, or is there a list of known trojans that bug webhosts?
akashik
04-09-2003, 09:54 PM
the Trojan function in CPanel is next to hopeless. It doesn't provide enough information and throws up false positives left and center. I understand what you're saying though, but in all seriousness I'd stick to checking things via shell.
Greg Moore
sprintserve
04-10-2003, 02:15 PM
You may want to consider chkrootkit instead of Cpanel Trojan scanner, which was created with the right idea, but falls woefully short. It's a waste of time to use it really.
mainarea
04-10-2003, 03:02 PM
The CPanel trojan scanner is horrible, it detects perl, sendmail, and many other standard programs as trojans. chkrootkit would be a good thing to use (note to self: install chkrootkit on own server).
- Matt
Ok, thanks for all reactions. Does any of you know if there's any (reasonable-priced) anti-virus and trojan scanner, especially for webhosts, or at least operational at redhat?
Oh nevermind, I thought sprintserve ment to say that chkrootkit is crap as well, but it seems like that's the good stuff :)
MrWatchDawg
04-11-2003, 11:30 AM
awww its cpanel now thats full of trojans it self..hehe
cpanel full of trojans? hmm I wonder where u base that on..
submenu
04-11-2003, 02:43 PM
Originally posted by Apoc
cpanel full of trojans? hmm I wonder where u base that on..
the formmail.cgi clone & guestbook.cgi bugs possibly :eek3:
sprintserve
04-11-2003, 02:45 PM
That's not a trojan. That's a bug. Cpanel is buggy, but they don't put trojans (not that I know anyway).