Results 1 to 9 of 9
Thread: Trojans?!!
-
03-21-2004, 07:46 AM #1Junior Guru Wannabe
- Join Date
- Mar 2004
- Posts
- 44
Trojans?!!
My server wont let me send mail or access MySQL. After numberous restarts and editing config files etc it still did not work, so i scanned for trojans but am unsure if these are actually torjans?
Possible Trojan - /usr/bin/podchecker
Possible Trojan - /usr/bin/pstruct
Possible Trojan - /usr/bin/splain
Possible Trojan - /usr/bin/xsubpp
-
03-21-2004, 07:54 AM #2Disabled
- Join Date
- Sep 2003
- Posts
- 163
I may be wrong, but I don't think those are trojans. Aren't some of those converters?
-
03-21-2004, 08:05 AM #3Junior Guru Wannabe
- Join Date
- Mar 2004
- Posts
- 44
ok thanks, any idea on how to get mysql and exim working again? it just times out
-
03-21-2004, 08:10 AM #4Junior Guru Wannabe
- Join Date
- Jan 2004
- Posts
- 31
Try install chkrootkit. Cpanel gives false positives with trojans.
-
03-21-2004, 08:12 AM #5Junior Guru Wannabe
- Join Date
- Mar 2004
- Posts
- 44
i got it installed, how do i run it?
-
03-21-2004, 08:22 AM #6ex-Aussie
- Join Date
- Aug 2000
- Location
- Tacoma, Washington
- Posts
- 9,576
Originally posted by TotalHostero
Cpanel gives false positives with trojans.Former Webhost... now, just a guy.
-
03-21-2004, 08:39 AM #7Web Hosting Master
- Join Date
- Mar 2003
- Location
- Singapore
- Posts
- 763
i got it installed, how do i run it?
./chkrootkit
It will generate the result for you.SecureAX Singapore - Virtualization, Private Cloud Computing & Managed Datacenter in Singapore
- Managed Virtual Private Servers, Dedicated Servers & Colocation Services in Singapore
- Gigabit backbone at Equinix Singapore, Telstra SGCS2 & Telin Datacenters with Private Link for Disaster Recovery setup
-
03-21-2004, 08:41 AM #8Web Hosting Master
- Join Date
- Nov 2001
- Posts
- 5,383
Also check /var/log/messages
-
03-21-2004, 10:47 AM #9Junior Guru Wannabe
- Join Date
- Mar 2004
- Posts
- 44
ok i have a problem..
Checking `bindshell'... INFECTED (PORTS: 465)
how do i go about fixing it?