Results 1 to 6 of 6
  1. #1
    Join Date
    Aug 2001
    Posts
    160

    Cpanel: Possible Trojan alert?

    While doing a Cpanel Trojan scan I got this:

    Possible Trojan - /sbin/depmod
    .

    Possible Trojan - /sbin/insmod
    .

    Possible Trojan - /sbin/insmod.static
    .
    .
    .
    .

    Possible Trojan - /sbin/modinfo
    .

    Possible Trojan - /sbin/modprobe
    .

    Possible Trojan - /sbin/rmmod

    -

    Thing is since I installed stuff like APF, BFD and a few other things I wonder if this alerts couldn't be caused by it.

    Cheers

  2. #2
    Join Date
    Oct 2003
    Location
    Long Island, New York
    Posts
    220
    These are harmless.
    TWSites.com - Business Web Hosting Solutions & Server Management Since 2003

  3. #3
    Join Date
    Nov 2004
    Location
    India
    Posts
    1,100
    Rui,

    Dont not use 'Cpanel Trojan scanner' to scan your server, most of them are false alarms. You can either use rkhunter or chkrootkit to scan your server..
    AssistanZ - Beyond Boundaries...
    Cloudstack Consultancy / 24x7 Web Hosting Support / 24x7 Server Management / Infrastructure Management Services
    Web & Mobile Apps Development / Web Designing Services / Php, Grails, Java Development

  4. #4
    Join Date
    Oct 2003
    Location
    Long Island, New York
    Posts
    220
    Better yet, use both... and set them up as a cron script so they run daily and email you.
    TWSites.com - Business Web Hosting Solutions & Server Management Since 2003

  5. #5
    Join Date
    Aug 2001
    Posts
    160
    Originally posted by DoCk
    Better yet, use both... and set them up as a cron script so they run daily and email you.
    Already have rkhunter installed but didn't setup a cron job or daily reports, will take a look into how to do it tomorrow

    thx folks

  6. #6
    Join Date
    Sep 2002
    Location
    Canada
    Posts
    452

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •