Fedora-Fr - Communauté francophone Fedora - Linux

Communauté francophone des utilisateurs de la distribution Linux Fedora.

  

Dernière news : Représenter Fedora au Capitole du Libre 2019

#1 12/09/2019 23:49:40

new10
Membre
Inscription : 12/09/2019
Messages : 7

[Résolu] rootkit detecté

bonjour
je suis nouveau sur fedora et linux en general

aujourdhui j'ai eu un message qui me dit selinux detect un rootkit

apres quelque recherche j'ai su que un rootkit et un programme malvaillant,

j'ai chercher a me debarasser de ce rootkit je suis tomber sur un program rkhunter
mais je sais pas l'utiliser
je sais juste faire rkhunter -c
et j'ai une liste du scan que je sais pas quoi faire
j'au vu 4 warning ou plus

voici le scan si quel'un qui s'est conai peut m'aider merci davance


[23:30:12] Running Rootkit Hunter version 1.4.6 on localhost
[23:30:12]
[23:30:12] Info: Start date is jeu. sept. 12 23:30:12 CEST 2019
[23:30:12]
[23:30:12] Checking configuration file and command-line options...
[23:30:12] Info: Detected operating system is 'Linux'
[23:30:12] Info: Uname output is 'Linux localhost.localdomain 5.2.11-200.fc30.x86_64 #1 SMP Thu Aug 29 12:43:20 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux'
[23:30:12] Info: Command line is /usr/bin/rkhunter -c
[23:30:12] Info: Environment shell is /bin/bash; rkhunter is using bash
[23:30:12] Info: Using configuration file '/etc/rkhunter.conf'
[23:30:12] Info: Installation directory is '/usr'
[23:30:12] Info: Using language 'en'
[23:30:12] Info: Using '/var/lib/rkhunter/db' as the database directory
[23:30:12] Info: Using '/usr/share/rkhunter/scripts' as the support script directory
[23:30:12] Info: Using '/usr/share/Modules/bin /usr/local/sbin /usr/local/bin /usr/sbin /usr/bin /bin /sbin /usr/libexec /usr/local/libexec' as the command directories
[23:30:12] Info: Using '/var/lib/rkhunter' as the temporary directory
[23:30:12] Info: No mail-on-warning address configured
[23:30:12] Info: X will be automatically detected
[23:30:12] Info: Using second color set
[23:30:12] Info: Found the 'basename' command: /usr/bin/basename
[23:30:12] Info: Found the 'diff' command: /usr/bin/diff
[23:30:12] Info: Found the 'dirname' command: /usr/bin/dirname
[23:30:12] Info: Found the 'file' command: /usr/bin/file
[23:30:12] Info: Found the 'find' command: /usr/bin/find
[23:30:12] Info: Found the 'ifconfig' command: /usr/sbin/ifconfig
[23:30:12] Info: Found the 'ip' command: /usr/sbin/ip
[23:30:12] Info: Found the 'ipcs' command: /usr/bin/ipcs
[23:30:12] Info: Found the 'ldd' command: /usr/bin/ldd
[23:30:12] Info: Found the 'lsattr' command: /usr/bin/lsattr
[23:30:12] Info: Found the 'lsmod' command: /usr/sbin/lsmod
[23:30:12] Info: Found the 'lsof' command: /usr/bin/lsof
[23:30:12] Info: Found the 'mktemp' command: /usr/bin/mktemp
[23:30:12] Info: Found the 'netstat' command: /usr/bin/netstat
[23:30:12] Info: Found the 'numfmt' command: /usr/bin/numfmt
[23:30:12] Info: Found the 'perl' command: /usr/bin/perl
[23:30:12] Info: Found the 'pgrep' command: /usr/bin/pgrep
[23:30:12] Info: Found the 'ps' command: /usr/bin/ps
[23:30:12] Info: Found the 'pwd' command: /usr/bin/pwd
[23:30:12] Info: Found the 'readlink' command: /usr/bin/readlink
[23:30:12] Info: Found the 'stat' command: /usr/bin/stat
[23:30:12] Info: Found the 'strings' command: /usr/bin/strings
[23:30:12] Info: System is not using prelinking
[23:30:12] Info: Using the '/usr/bin/sha256sum' command for the file hash checks
[23:30:12] Info: The hash function field index is set to 1
[23:30:12] Info: Using package manager 'RPM' for file property checks
[23:30:12] Info: Found the 'rpm' command: /usr/bin/rpm
[23:30:12] Info: Previous file attributes were stored
[23:30:12] Info: Enabled tests are: all
[23:30:13] Info: Disabled tests are: suspscan hidden_ports deleted_files packet_cap_apps apps ipc_shared_mem
[23:30:13] Info: Current logging will be appended to the log file
[23:30:13] Info: Found kernel symbols file '/proc/kallsyms'
[23:30:13] Info: Using 'date' to process epoch second times
[23:30:13] Info: Locking is not being used
[23:30:13]
[23:30:13] Starting system checks...
[23:30:13]
[23:30:13] Info: Starting test name 'system_commands'
[23:30:13] Checking system commands...
[23:30:13]
[23:30:13] Info: Starting test name 'strings'
[23:30:13] Performing 'strings' command checks
[23:30:13]   Scanning for string /usr/sbin/ntpsx             [ OK ]
[23:30:13]   Scanning for string /usr/sbin/.../bkit-ava      [ OK ]
[23:30:13]   Scanning for string /usr/sbin/.../bkit-d        [ OK ]
[23:30:13]   Scanning for string /usr/sbin/.../bkit-shd      [ OK ]
[23:30:13]   Scanning for string /usr/sbin/.../bkit-f        [ OK ]
[23:30:13]   Scanning for string /usr/include/.../proc.h     [ OK ]
[23:30:13]   Scanning for string /usr/include/.../.bash_history [ OK ]
[23:30:13]   Scanning for string /usr/include/.../bkit-get   [ OK ]
[23:30:13]   Scanning for string /usr/include/.../bkit-dl    [ OK ]
[23:30:13]   Scanning for string /usr/include/.../bkit-screen [ OK ]
[23:30:13]   Scanning for string /usr/include/.../bkit-sleep [ OK ]
[23:30:13]   Scanning for string /usr/lib/.../bkit-adore.o   [ OK ]
[23:30:13]   Scanning for string /usr/lib/.../ls             [ OK ]
[23:30:13]   Scanning for string /usr/lib/.../netstat        [ OK ]
[23:30:13]   Scanning for string /usr/lib/.../lsof           [ OK ]
[23:30:13]   Scanning for string /usr/lib/.../bkit-ssh/bkit-shdcfg [ OK ]
[23:30:13]   Scanning for string /usr/lib/.../bkit-ssh/bkit-shhk [ OK ]
[23:30:13]   Scanning for string /usr/lib/.../bkit-ssh/bkit-pw [ OK ]
[23:30:13]   Scanning for string /usr/lib/.../bkit-ssh/bkit-shrs [ OK ]
[23:30:13]   Scanning for string /usr/lib/.../bkit-ssh/bkit-mots [ OK ]
[23:30:13]   Scanning for string /usr/lib/.../uconf.inv      [ OK ]
[23:30:14]   Scanning for string /usr/lib/.../psr            [ OK ]
[23:30:14]   Scanning for string /usr/lib/.../find           [ OK ]
[23:30:14]   Scanning for string /usr/lib/.../pstree         [ OK ]
[23:30:14]   Scanning for string /usr/lib/.../slocate        [ OK ]
[23:30:14]   Scanning for string /usr/lib/.../du             [ OK ]
[23:30:14]   Scanning for string /usr/lib/.../top            [ OK ]
[23:30:14]   Scanning for string /usr/sbin/...               [ OK ]
[23:30:14]   Scanning for string /usr/include/...            [ OK ]
[23:30:14]   Scanning for string /usr/include/.../.tmp       [ OK ]
[23:30:14]   Scanning for string /usr/lib/...                [ OK ]
[23:30:14]   Scanning for string /usr/lib/.../.ssh           [ OK ]
[23:30:14]   Scanning for string /usr/lib/.../bkit-ssh       [ OK ]
[23:30:14]   Scanning for string /usr/lib/.bkit-             [ OK ]
[23:30:14]   Scanning for string /tmp/.bkp                   [ OK ]
[23:30:14]   Scanning for string /tmp/.cinik                 [ OK ]
[23:30:14]   Scanning for string /tmp/.font-unix/.cinik      [ OK ]
[23:30:14]   Scanning for string /lib/.sso                   [ OK ]
[23:30:14]   Scanning for string /lib/.so                    [ OK ]
[23:30:14]   Scanning for string /var/run/...dica/clean      [ OK ]
[23:30:14]   Scanning for string /var/run/...dica/dxr        [ OK ]
[23:30:14]   Scanning for string /var/run/...dica/read       [ OK ]
[23:30:14]   Scanning for string /var/run/...dica/write      [ OK ]
[23:30:14]   Scanning for string /var/run/...dica/lf         [ OK ]
[23:30:14]   Scanning for string /var/run/...dica/xl         [ OK ]
[23:30:14]   Scanning for string /var/run/...dica/xdr        [ OK ]
[23:30:14]   Scanning for string /var/run/...dica/psg        [ OK ]
[23:30:14]   Scanning for string /var/run/...dica/secure     [ OK ]
[23:30:14]   Scanning for string /var/run/...dica/rdx        [ OK ]
[23:30:15]   Scanning for string /var/run/...dica/va         [ OK ]
[23:30:15]   Scanning for string /var/run/...dica/cl.sh      [ OK ]
[23:30:15]   Scanning for string /var/run/...dica/last.log   [ OK ]
[23:30:15]   Scanning for string /usr/bin/.etc               [ OK ]
[23:30:15]   Scanning for string /etc/sshd_config            [ OK ]
[23:30:15]   Scanning for string /etc/ssh_host_key           [ OK ]
[23:30:15]   Scanning for string /etc/ssh_random_seed        [ OK ]
[23:30:15]   Scanning for string /dev/ptyp                   [ OK ]
[23:30:15]   Scanning for string /dev/ptyq                   [ OK ]
[23:30:15]   Scanning for string /dev/ptyr                   [ OK ]
[23:30:15]   Scanning for string /dev/ptys                   [ OK ]
[23:30:15]   Scanning for string /dev/ptyt                   [ OK ]
[23:30:15]   Scanning for string /dev/fd/.88/freshb-bsd      [ OK ]
[23:30:15]   Scanning for string /dev/fd/.88/fresht          [ OK ]
[23:30:15]   Scanning for string /dev/fd/.88/zxsniff         [ OK ]
[23:30:15]   Scanning for string /dev/fd/.88/zxsniff.log     [ OK ]
[23:30:15]   Scanning for string /dev/fd/.99/.ttyf00         [ OK ]
[23:30:15]   Scanning for string /dev/fd/.99/.ttyp00         [ OK ]
[23:30:15]   Scanning for string /dev/fd/.99/.ttyq00         [ OK ]
[23:30:15]   Scanning for string /dev/fd/.99/.ttys00         [ OK ]
[23:30:15]   Scanning for string /dev/fd/.99/.pwsx00         [ OK ]
[23:30:15]   Scanning for string /etc/.acid                  [ OK ]
[23:30:15]   Scanning for string /usr/lib/.fx/sched_host.2   [ OK ]
[23:30:15]   Scanning for string /usr/lib/.fx/random_d.2     [ OK ]
[23:30:15]   Scanning for string /usr/lib/.fx/set_pid.2      [ OK ]
[23:30:15]   Scanning for string /usr/lib/.fx/setrgrp.2      [ OK ]
[23:30:15]   Scanning for string /usr/lib/.fx/TOHIDE         [ OK ]
[23:30:15]   Scanning for string /usr/lib/.fx/cons.saver     [ OK ]
[23:30:15]   Scanning for string /usr/lib/.fx/adore/ava/ava  [ OK ]
[23:30:16]   Scanning for string /usr/lib/.fx/adore/adore/adore.ko [ OK ]
[23:30:16]   Scanning for string /bin/sysback                [ OK ]
[23:30:16]   Scanning for string /usr/local/bin/sysback      [ OK ]
[23:30:16]   Scanning for string /usr/lib/.tbd               [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/t0rns     [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/du        [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/ls        [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/t0rnsb    [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/ps        [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/t0rnp     [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/find      [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/ifconfig  [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/pg        [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/ssh.tgz   [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/top       [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/sz        [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/login     [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/in.fingerd [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/1i0n.sh   [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/pstree    [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/in.telnetd [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/mjy       [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/sush      [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/tfn       [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/name      [ OK ]
[23:30:16]   Scanning for string /dev/.lib/lib/lib/getip.sh  [ OK ]
[23:30:16]   Scanning for string /usr/info/.torn/sh*         [ OK ]
[23:30:16]   Scanning for string /usr/src/.puta/.1addr       [ OK ]
[23:30:17]   Scanning for string /usr/src/.puta/.1file       [ OK ]
[23:30:17]   Scanning for string /usr/src/.puta/.1proc       [ OK ]
[23:30:17]   Scanning for string /usr/src/.puta/.1logz       [ OK ]
[23:30:17]   Scanning for string /usr/info/.t0rn             [ OK ]
[23:30:17]   Scanning for string /dev/.lib                   [ OK ]
[23:30:17]   Scanning for string /dev/.lib/lib               [ OK ]
[23:30:17]   Scanning for string /dev/.lib/lib/lib           [ OK ]
[23:30:17]   Scanning for string /dev/.lib/lib/lib/dev       [ OK ]
[23:30:17]   Scanning for string /dev/.lib/lib/scan          [ OK ]
[23:30:17]   Scanning for string /usr/src/.puta              [ OK ]
[23:30:17]   Scanning for string /usr/man/man1/man1          [ OK ]
[23:30:17]   Scanning for string /usr/man/man1/man1/lib      [ OK ]
[23:30:17]   Scanning for string /usr/man/man1/man1/lib/.lib [ OK ]
[23:30:17]   Scanning for string /usr/man/man1/man1/lib/.lib/.backup [ OK ]
[23:30:17]
[23:30:17] Info: Starting test name 'shared_libs'
[23:30:17] Performing 'shared libraries' checks
[23:30:17]   Checking for preloading variables               [ None found ]
[23:30:17]   Checking for preloaded libraries                [ None found ]
[23:30:17]
[23:30:17] Info: Starting test name 'shared_libs_path'
[23:30:17]   Checking LD_LIBRARY_PATH variable               [ Not found ]
[23:30:17]
[23:30:17] Info: Starting test name 'properties'
[23:30:17] Performing file properties checks
[23:30:17] Warning: Checking for prerequisites               [ Warning ]
[23:30:17]          The file of stored file properties (rkhunter.dat) does not exist, and should be created. To do this type in 'rkhunter --propupd'.
[23:30:17] Info: The file properties check will still run as there are checks that can be performed without the 'rkhunter.dat' file.
[23:30:17]
[23:30:17] Warning: WARNING! It is the users responsibility to ensure that when the '--propupd' option
           is used, all the files on their system are known to be genuine, and installed from a
           reliable source. The rkhunter '--check' option will compare the current file properties
           against previously stored values, and report if any values differ. However, rkhunter
           cannot determine what has caused the change, that is for the user to do.
[23:30:19]   /usr/sbin/adduser                               [ OK ]
[23:30:19]   /usr/sbin/chkconfig                             [ OK ]
[23:30:19]   /usr/sbin/chroot                                [ OK ]
[23:30:19]   /usr/sbin/depmod                                [ OK ]
[23:30:19]   /usr/sbin/fsck                                  [ OK ]
[23:30:19]   /usr/sbin/fuser                                 [ OK ]
[23:30:19]   /usr/sbin/groupadd                              [ OK ]
[23:30:19]   /usr/sbin/groupdel                              [ OK ]
[23:30:20]   /usr/sbin/groupmod                              [ OK ]
[23:30:20]   /usr/sbin/grpck                                 [ OK ]
[23:30:20]   /usr/sbin/ifconfig                              [ OK ]
[23:30:20]   /usr/sbin/ifdown                                [ OK ]
[23:30:20]   /usr/sbin/ifup                                  [ OK ]
[23:30:20]   /usr/sbin/init                                  [ OK ]
[23:30:20]   /usr/sbin/insmod                                [ OK ]
[23:30:20]   /usr/sbin/ip                                    [ OK ]
[23:30:20]   /usr/sbin/lsmod                                 [ OK ]
[23:30:20]   /usr/sbin/modinfo                               [ OK ]
[23:30:20]   /usr/sbin/modprobe                              [ OK ]
[23:30:20]   /usr/sbin/nologin                               [ OK ]
[23:30:20]   /usr/sbin/ping                                  [ OK ]
[23:30:20]   /usr/sbin/pwck                                  [ OK ]
[23:30:21]   /usr/sbin/rmmod                                 [ OK ]
[23:30:21]   /usr/sbin/route                                 [ OK ]
[23:30:21]   /usr/sbin/rsyslogd                              [ OK ]
[23:30:21]   /usr/sbin/runlevel                              [ OK ]
[23:30:21]   /usr/sbin/sestatus                              [ OK ]
[23:30:21]   /usr/sbin/sshd                                  [ OK ]
[23:30:21]   /usr/sbin/sulogin                               [ OK ]
[23:30:21]   /usr/sbin/sysctl                                [ OK ]
[23:30:21]   /usr/sbin/useradd                               [ OK ]
[23:30:21]   /usr/sbin/userdel                               [ OK ]
[23:30:21]   /usr/sbin/usermod                               [ OK ]
[23:30:21]   /usr/sbin/vipw                                  [ OK ]
[23:30:22]   /usr/bin/awk                                    [ OK ]
[23:30:22]   /usr/bin/basename                               [ OK ]
[23:30:22]   /usr/bin/bash                                   [ OK ]
[23:30:22]   /usr/bin/cat                                    [ OK ]
[23:30:22]   /usr/bin/chattr                                 [ OK ]
[23:30:22]   /usr/bin/chmod                                  [ OK ]
[23:30:22]   /usr/bin/chown                                  [ OK ]
[23:30:22]   /usr/bin/cp                                     [ OK ]
[23:30:22]   /usr/bin/curl                                   [ OK ]
[23:30:22]   /usr/bin/cut                                    [ OK ]
[23:30:22]   /usr/bin/date                                   [ OK ]
[23:30:22]   /usr/bin/df                                     [ OK ]
[23:30:22]   /usr/bin/diff                                   [ OK ]
[23:30:22]   /usr/bin/dirname                                [ OK ]
[23:30:22]   /usr/bin/dmesg                                  [ OK ]
[23:30:23]   /usr/bin/du                                     [ OK ]
[23:30:23]   /usr/bin/echo                                   [ OK ]
[23:30:23]   /usr/bin/ed                                     [ OK ]
[23:30:23]   /usr/bin/egrep                                  [ Warning ]
[23:30:23] Warning: The command '/usr/bin/egrep' has been replaced by a script: /usr/bin/egrep: a /usr/bin/sh script, ASCII text executable
[23:30:23]   /usr/bin/env                                    [ OK ]
[23:30:23]   /usr/bin/fgrep                                  [ Warning ]
[23:30:23] Warning: The command '/usr/bin/fgrep' has been replaced by a script: /usr/bin/fgrep: a /usr/bin/sh script, ASCII text executable
[23:30:23]   /usr/bin/file                                   [ OK ]
[23:30:23]   /usr/bin/find                                   [ OK ]
[23:30:23]   /usr/bin/grep                                   [ OK ]
[23:30:23]   /usr/bin/groups                                 [ OK ]
[23:30:24] Info: Found file '/usr/bin/groups': it is whitelisted for the 'script replacement' check.
[23:30:24]   /usr/bin/head                                   [ OK ]
[23:30:24]   /usr/bin/id                                     [ OK ]
[23:30:24]   /usr/bin/ipcs                                   [ OK ]
[23:30:24]   /usr/bin/kill                                   [ OK ]
[23:30:24]   /usr/bin/killall                                [ OK ]
[23:30:24]   /usr/bin/last                                   [ OK ]
[23:30:24]   /usr/bin/lastlog                                [ OK ]
[23:30:24]   /usr/bin/ldd                                    [ OK ]
[23:30:24] Info: Found file '/usr/bin/ldd': it is whitelisted for the 'script replacement' check.
[23:30:24]   /usr/bin/less                                   [ OK ]
[23:30:24]   /usr/bin/locate                                 [ OK ]
[23:30:24]   /usr/bin/logger                                 [ OK ]
[23:30:24]   /usr/bin/login                                  [ OK ]
[23:30:24]   /usr/bin/ls                                     [ OK ]
[23:30:25]   /usr/bin/lsattr                                 [ OK ]
[23:30:25]   /usr/bin/lsof                                   [ OK ]
[23:30:25]   /usr/bin/mail                                   [ OK ]
[23:30:25]   /usr/bin/md5sum                                 [ OK ]
[23:30:25]   /usr/bin/mktemp                                 [ OK ]
[23:30:25]   /usr/bin/more                                   [ OK ]
[23:30:25]   /usr/bin/mount                                  [ OK ]
[23:30:25]   /usr/bin/mv                                     [ OK ]
[23:30:25]   /usr/bin/netstat                                [ OK ]
[23:30:25]   /usr/bin/newgrp                                 [ OK ]
[23:30:25]   /usr/bin/passwd                                 [ OK ]
[23:30:25]   /usr/bin/perl                                   [ OK ]
[23:30:25]   /usr/bin/pgrep                                  [ OK ]
[23:30:26]   /usr/bin/ping                                   [ OK ]
[23:30:26]   /usr/bin/pkill                                  [ OK ]
[23:30:26]   /usr/bin/ps                                     [ OK ]
[23:30:26]   /usr/bin/pstree                                 [ OK ]
[23:30:26]   /usr/bin/pwd                                    [ OK ]
[23:30:26]   /usr/bin/readlink                               [ OK ]
[23:30:26]   /usr/bin/rkhunter                               [ OK ]
[23:30:26]   /usr/bin/rpm                                    [ OK ]
[23:30:26]   /usr/bin/runcon                                 [ OK ]
[23:30:26]   /usr/bin/sed                                    [ OK ]
[23:30:27]   /usr/bin/sh                                     [ OK ]
[23:30:27]   /usr/bin/sha1sum                                [ OK ]
[23:30:27]   /usr/bin/sha224sum                              [ OK ]
[23:30:27]   /usr/bin/sha256sum                              [ OK ]
[23:30:27]   /usr/bin/sha384sum                              [ OK ]
[23:30:27]   /usr/bin/sha512sum                              [ OK ]
[23:30:27]   /usr/bin/size                                   [ OK ]
[23:30:27]   /usr/bin/sort                                   [ OK ]
[23:30:27]   /usr/bin/ssh                                    [ OK ]
[23:30:27]   /usr/bin/stat                                   [ OK ]
[23:30:27]   /usr/bin/strings                                [ OK ]
[23:30:27]   /usr/bin/su                                     [ OK ]
[23:30:28]   /usr/bin/sudo                                   [ OK ]
[23:30:28]   /usr/bin/tail                                   [ OK ]
[23:30:28]   /usr/bin/telnet                                 [ OK ]
[23:30:28]   /usr/bin/test                                   [ OK ]
[23:30:28]   /usr/bin/top                                    [ OK ]
[23:30:28]   /usr/bin/touch                                  [ OK ]
[23:30:28]   /usr/bin/tr                                     [ OK ]
[23:30:28]   /usr/bin/uname                                  [ OK ]
[23:30:28]   /usr/bin/uniq                                   [ OK ]
[23:30:28]   /usr/bin/users                                  [ OK ]
[23:30:28]   /usr/bin/vmstat                                 [ OK ]
[23:30:28]   /usr/bin/w                                      [ OK ]
[23:30:28]   /usr/bin/watch                                  [ OK ]
[23:30:29]   /usr/bin/wc                                     [ OK ]
[23:30:29]   /usr/bin/wget                                   [ OK ]
[23:30:29]   /usr/bin/whatis                                 [ OK ]
[23:30:29] Info: Found file '/usr/bin/whatis': it is whitelisted for the 'script replacement' check.
[23:30:29]   /usr/bin/whereis                                [ OK ]
[23:30:29]   /usr/bin/which                                  [ OK ]
[23:30:29]   /usr/bin/who                                    [ OK ]
[23:30:29]   /usr/bin/whoami                                 [ OK ]
[23:30:29]   /usr/bin/numfmt                                 [ OK ]
[23:30:29]   /usr/bin/kmod                                   [ OK ]
[23:30:29]   /usr/bin/systemctl                              [ OK ]
[23:30:29]   /usr/bin/gawk                                   [ OK ]
[23:30:29]   /usr/bin/mailx                                  [ OK ]
[23:30:30]   /usr/libexec/nm-ifdown                          [ Warning ]
[23:30:30] Warning: The command '/usr/libexec/nm-ifdown' has been replaced by a script: /usr/libexec/nm-ifdown: a /usr/bin/sh script, ASCII text executable
[23:30:30]   /usr/libexec/nm-ifup                            [ Warning ]
[23:30:30] Warning: The command '/usr/libexec/nm-ifup' has been replaced by a script: /usr/libexec/nm-ifup: a /usr/bin/sh script, ASCII text executable
[23:30:30]   /usr/libexec/gawk                               [ OK ]
[23:30:32]   /usr/lib/systemd/systemd                        [ OK ]
[23:32:00]
[23:32:00] Info: Starting test name 'rootkits'
[23:32:00] Checking for rootkits...
[23:32:00]
[23:32:00] Info: Starting test name 'known_rkts'
[23:32:00] Performing check of known rootkit files and directories
[23:32:00]
[23:32:00] Checking for 55808 Trojan - Variant A...
[23:32:00]   Checking for file '/tmp/.../r'                  [ Not found ]
[23:32:00]   Checking for file '/tmp/.../a'                  [ Not found ]
[23:32:00] 55808 Trojan - Variant A                          [ Not found ]
[23:32:00]
[23:32:00] Checking for ADM Worm...
[23:32:00]   Checking for string 'w0rm'                      [ Not found ]
[23:32:00] ADM Worm                                          [ Not found ]
[23:32:00]
[23:32:00] Checking for AjaKit Rootkit...
[23:32:00]   Checking for file '/dev/tux/.addr'              [ Not found ]
[23:32:00]   Checking for file '/dev/tux/.proc'              [ Not found ]
[23:32:00]   Checking for file '/dev/tux/.file'              [ Not found ]
[23:32:00]   Checking for file '/lib/.libgh-gh/cleaner'      [ Not found ]
[23:32:00]   Checking for file '/lib/.libgh-gh/Patch/patch'  [ Not found ]
[23:32:00]   Checking for file '/lib/.libgh-gh/sb0k'         [ Not found ]
[23:32:01]   Checking for directory '/dev/tux'               [ Not found ]
[23:32:01]   Checking for directory '/lib/.libgh-gh'         [ Not found ]
[23:32:01] AjaKit Rootkit                                    [ Not found ]
[23:32:01]
[23:32:01] Checking for Adore Rootkit...
[23:32:01]   Checking for file '/usr/secure'                 [ Not found ]
[23:32:01]   Checking for file '/usr/doc/sys/qrt'            [ Not found ]
[23:32:01]   Checking for file '/usr/doc/sys/run'            [ Not found ]
[23:32:01]   Checking for file '/usr/doc/sys/crond'          [ Not found ]
[23:32:01]   Checking for file '/usr/sbin/kfd'               [ Not found ]
[23:32:01]   Checking for file '/usr/doc/kern/var'           [ Not found ]
[23:32:01]   Checking for file '/usr/doc/kern/string.o'      [ Not found ]
[23:32:01]   Checking for file '/usr/doc/kern/ava'           [ Not found ]
[23:32:01]   Checking for file '/usr/doc/kern/adore.o'       [ Not found ]
[23:32:01]   Checking for file '/var/log/ssh/old'            [ Not found ]
[23:32:01]   Checking for directory '/lib/security/.config/ssh' [ Not found ]
[23:32:01]   Checking for directory '/usr/doc/kern'          [ Not found ]
[23:32:01]   Checking for directory '/usr/doc/backup'        [ Not found ]
[23:32:01]   Checking for directory '/usr/doc/backup/txt'    [ Not found ]
[23:32:01]   Checking for directory '/lib/backup'            [ Not found ]
[23:32:01]   Checking for directory '/lib/backup/txt'        [ Not found ]
[23:32:01]   Checking for directory '/usr/doc/work'          [ Not found ]
[23:32:01]   Checking for directory '/usr/doc/sys'           [ Not found ]
[23:32:01]   Checking for directory '/var/log/ssh'           [ Not found ]
[23:32:01]   Checking for directory '/usr/doc/.spool'        [ Not found ]
[23:32:02]   Checking for directory '/usr/lib/kterm'         [ Not found ]
[23:32:02] Adore Rootkit                                     [ Not found ]
[23:32:02]
[23:32:02] Checking for aPa Kit...
[23:32:02]   Checking for file '/usr/share/.aPa'             [ Not found ]
[23:32:02] aPa Kit                                           [ Not found ]
[23:32:02]
[23:32:02] Checking for Apache Worm...
[23:32:02]   Checking for file '/bin/.log'                   [ Not found ]
[23:32:02] Apache Worm                                       [ Not found ]
[23:32:02]
[23:32:02] Checking for Ambient (ark) Rootkit...
[23:32:02]   Checking for file '/usr/lib/.ark?'              [ Not found ]
[23:32:02]   Checking for file '/dev/ptyxx/.log'             [ Not found ]
[23:32:02]   Checking for file '/dev/ptyxx/.file'            [ Not found ]
[23:32:02]   Checking for file '/dev/ptyxx/.proc'            [ Not found ]
[23:32:02]   Checking for file '/dev/ptyxx/.addr'            [ Not found ]
[23:32:02]   Checking for directory '/dev/ptyxx'             [ Not found ]
[23:32:02] Ambient (ark) Rootkit                             [ Not found ]
[23:32:02]
[23:32:02] Checking for Balaur Rootkit...
[23:32:02]   Checking for file '/usr/lib/liblog.o'           [ Not found ]
[23:32:02]   Checking for directory '/usr/lib/.kinetic'      [ Not found ]
[23:32:02]   Checking for directory '/usr/lib/.egcs'         [ Not found ]
[23:32:02]   Checking for directory '/usr/lib/.wormie'       [ Not found ]
[23:32:02] Balaur Rootkit                                    [ Not found ]
[23:32:02]
[23:32:02] Checking for BeastKit Rootkit...
[23:32:02]   Checking for file '/usr/sbin/arobia'            [ Not found ]
[23:32:02]   Checking for file '/usr/sbin/idrun'             [ Not found ]
[23:32:02]   Checking for file '/usr/lib/elm/arobia/elm'     [ Not found ]
[23:32:03]   Checking for file '/usr/lib/elm/arobia/elm/hk'  [ Not found ]
[23:32:03]   Checking for file '/usr/lib/elm/arobia/elm/hk.pub' [ Not found ]
[23:32:03]   Checking for file '/usr/lib/elm/arobia/elm/sc'  [ Not found ]
[23:32:03]   Checking for file '/usr/lib/elm/arobia/elm/sd.pp' [ Not found ]
[23:32:03]   Checking for file '/usr/lib/elm/arobia/elm/sdco' [ Not found ]
[23:32:03]   Checking for file '/usr/lib/elm/arobia/elm/srsd' [ Not found ]
[23:32:03]   Checking for directory '/lib/ldd.so/bktools'    [ Not found ]
[23:32:03] BeastKit Rootkit                                  [ Not found ]
[23:32:03]
[23:32:03] Checking for beX2 Rootkit...
[23:32:03]   Checking for file '/usr/info/termcap.info-5.gz' [ Not found ]
[23:32:03]   Checking for file '/usr/bin/sshd2'              [ Not found ]
[23:32:03]   Checking for directory '/usr/include/bex'       [ Not found ]
[23:32:03] beX2 Rootkit                                      [ Not found ]
[23:32:03]
[23:32:03] Checking for BOBKit Rootkit...
[23:32:03]   Checking for file '/usr/sbin/ntpsx'             [ Not found ]
[23:32:03]   Checking for file '/usr/sbin/.../bkit-ava'      [ Not found ]
[23:32:03]   Checking for file '/usr/sbin/.../bkit-d'        [ Not found ]
[23:32:03]   Checking for file '/usr/sbin/.../bkit-shd'      [ Not found ]
[23:32:03]   Checking for file '/usr/sbin/.../bkit-f'        [ Not found ]
[23:32:03]   Checking for file '/usr/include/.../proc.h'     [ Not found ]
[23:32:03]   Checking for file '/usr/include/.../.bash_history' [ Not found ]
[23:32:03]   Checking for file '/usr/include/.../bkit-get'   [ Not found ]
[23:32:03]   Checking for file '/usr/include/.../bkit-dl'    [ Not found ]
[23:32:03]   Checking for file '/usr/include/.../bkit-screen' [ Not found ]
[23:32:03]   Checking for file '/usr/include/.../bkit-sleep' [ Not found ]
[23:32:04]   Checking for file '/usr/lib/.../bkit-adore.o'   [ Not found ]
[23:32:04]   Checking for file '/usr/lib/.../ls'             [ Not found ]
[23:32:04]   Checking for file '/usr/lib/.../netstat'        [ Not found ]
[23:32:04]   Checking for file '/usr/lib/.../lsof'           [ Not found ]
[23:32:04]   Checking for file '/usr/lib/.../bkit-ssh/bkit-shdcfg' [ Not found ]
[23:32:04]   Checking for file '/usr/lib/.../bkit-ssh/bkit-shhk' [ Not found ]
[23:32:04]   Checking for file '/usr/lib/.../bkit-ssh/bkit-pw' [ Not found ]
[23:32:04]   Checking for file '/usr/lib/.../bkit-ssh/bkit-shrs' [ Not found ]
[23:32:04]   Checking for file '/usr/lib/.../bkit-ssh/bkit-mots' [ Not found ]
[23:32:04]   Checking for file '/usr/lib/.../uconf.inv'      [ Not found ]
[23:32:04]   Checking for file '/usr/lib/.../psr'            [ Not found ]
[23:32:04]   Checking for file '/usr/lib/.../find'           [ Not found ]
[23:32:04]   Checking for file '/usr/lib/.../pstree'         [ Not found ]
[23:32:04]   Checking for file '/usr/lib/.../slocate'        [ Not found ]
[23:32:04]   Checking for file '/usr/lib/.../du'             [ Not found ]
[23:32:04]   Checking for file '/usr/lib/.../top'            [ Not found ]
[23:32:04]   Checking for directory '/usr/sbin/...'          [ Not found ]
[23:32:04]   Checking for directory '/usr/include/...'       [ Not found ]
[23:32:04]   Checking for directory '/usr/include/.../.tmp'  [ Not found ]
[23:32:04]   Checking for directory '/usr/lib/...'           [ Not found ]
[23:32:04]   Checking for directory '/usr/lib/.../.ssh'      [ Not found ]
[23:32:04]   Checking for directory '/usr/lib/.../bkit-ssh'  [ Not found ]
[23:32:04]   Checking for directory '/usr/lib/.bkit-'        [ Not found ]
[23:32:04]   Checking for directory '/tmp/.bkp'              [ Not found ]
[23:32:04] BOBKit Rootkit                                    [ Not found ]
[23:32:04]
[23:32:04] Checking for cb Rootkit...
[23:32:04]   Checking for file '/dev/srd0'                   [ Not found ]
[23:32:05]   Checking for file '/lib/libproc.so.2.0.6'       [ Not found ]
[23:32:05]   Checking for file '/dev/mounnt'                 [ Not found ]
[23:32:05]   Checking for file '/etc/rc.d/init.d/init'       [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.zeen/..<SP>/cl'    [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.zeen/..<SP>/.x.tgz' [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.zeen/..<SP>/statdx' [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.zeen/..<SP>/wted'  [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.zeen/..<SP>/write' [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.zeen/..<SP>/scan'  [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.zeen/..<SP>/sc'    [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.zeen/..<SP>/sl2'   [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.zeen/..<SP>/wroot' [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.zeen/..<SP>/wscan' [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.zeen/..<SP>/wu'    [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.zeen/..<SP>/v'     [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.zeen/..<SP>/read'  [ Not found ]
[23:32:05]   Checking for file '/usr/lib/sshrc'              [ Not found ]
[23:32:05]   Checking for file '/usr/lib/ssh_host_key'       [ Not found ]
[23:32:05]   Checking for file '/usr/lib/ssh_host_key.pub'   [ Not found ]
[23:32:05]   Checking for file '/usr/lib/ssh_random_seed'    [ Not found ]
[23:32:05]   Checking for file '/usr/lib/sshd_config'        [ Not found ]
[23:32:05]   Checking for file '/usr/lib/shosts.equiv'       [ Not found ]
[23:32:05]   Checking for file '/usr/lib/ssh_known_hosts'    [ Not found ]
[23:32:05]   Checking for file '/u/zappa/.ssh/pid'           [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.system/..<SP>/tcp.log' [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.zeen/..<SP>/curatare/attrib' [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.zeen/..<SP>/curatare/chattr' [ Not found ]
[23:32:05]   Checking for file '/usr/bin/.zeen/..<SP>/curatare/ps' [ Not found ]
[23:32:06]   Checking for file '/usr/bin/.zeen/..<SP>/curatare/pstree' [ Not found ]
[23:32:06]   Checking for file '/usr/bin/.system/..<SP>/.x/xC.o' [ Not found ]
[23:32:06]   Checking for directory '/usr/bin/.zeen'         [ Not found ]
[23:32:06]   Checking for directory '/usr/bin/.zeen/..<SP>/curatare' [ Not found ]
[23:32:06]   Checking for directory '/usr/bin/.zeen/..<SP>/scan' [ Not found ]
[23:32:06]   Checking for directory '/usr/bin/.system/..<SP>' [ Not found ]
[23:32:06] cb Rootkit                                        [ Not found ]
[23:32:06]
[23:32:06] Checking for CiNIK Worm (Slapper.B variant)...
[23:32:06]   Checking for file '/tmp/.cinik'                 [ Not found ]
[23:32:06]   Checking for directory '/tmp/.font-unix/.cinik' [ Not found ]
[23:32:06] CiNIK Worm (Slapper.B variant)                    [ Not found ]
[23:32:06]
[23:32:06] Checking for Danny-Boy's Abuse Kit...
[23:32:06]   Checking for file '/dev/mdev'                   [ Not found ]
[23:32:06]   Checking for file '/usr/lib/libX.a'             [ Not found ]
[23:32:06] Danny-Boy's Abuse Kit                             [ Not found ]
[23:32:06]
[23:32:06] Checking for Devil RootKit...
[23:32:06]   Checking for file '/var/lib/games/.src'         [ Not found ]
[23:32:06]   Checking for file '/dev/dsx'                    [ Not found ]
[23:32:06]   Checking for file '/dev/caca'                   [ Not found ]
[23:32:06]   Checking for file '/dev/pro'                    [ Not found ]
[23:32:06]   Checking for file '/bin/bye'                    [ Not found ]
[23:32:06]   Checking for file '/bin/homedir'                [ Not found ]
[23:32:06]   Checking for file '/usr/bin/xfss'               [ Not found ]
[23:32:06]   Checking for file '/usr/sbin/tzava'             [ Not found ]
[23:32:06]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/holber' [ Not found ]
[23:32:06]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/sense' [ Not found ]
[23:32:06]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/clear' [ Not found ]
[23:32:07]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/tzava' [ Not found ]
[23:32:07]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/citeste' [ Not found ]
[23:32:07]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/killrk' [ Not found ]
[23:32:07]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/searchlog' [ Not found ]
[23:32:07]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/gaoaza' [ Not found ]
[23:32:07]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/cleaner' [ Not found ]
[23:32:07]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/shk' [ Not found ]
[23:32:07]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/srs' [ Not found ]
[23:32:07]   Checking for file '/usr/doc/tar/.../.dracusor/utile.tgz' [ Not found ]
[23:32:07]   Checking for file '/usr/doc/tar/.../.dracusor/webpage' [ Not found ]
[23:32:07]   Checking for file '/usr/doc/tar/.../.dracusor/getpsy' [ Not found ]
[23:32:07]   Checking for file '/usr/doc/tar/.../.dracusor/getbnc' [ Not found ]
[23:32:07]   Checking for file '/usr/doc/tar/.../.dracusor/getemech' [ Not found ]
[23:32:07]   Checking for file '/usr/doc/tar/.../.dracusor/localroot.sh' [ Not found ]
[23:32:07]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/old/sense' [ Not found ]
[23:32:07]   Checking for directory '/usr/doc/tar/.../.dracusor' [ Not found ]
[23:32:07] Devil RootKit                                     [ Not found ]
[23:32:07]
[23:32:07] Checking for Diamorphine LKM...
[23:32:07]   Checking for kernel symbol 'diamorphine'        [ Not found ]
[23:32:07]   Checking for kernel symbol 'module_hide'        [ Not found ]
[23:32:08]   Checking for kernel symbol 'module_hidden'      [ Not found ]
[23:32:08]   Checking for kernel symbol 'is_invisible'       [ Not found ]
[23:32:08]   Checking for kernel symbol 'hacked_getdents'    [ Not found ]
[23:32:08]   Checking for kernel symbol 'hacked_kill'        [ Not found ]
[23:32:08] Diamorphine LKM                                   [ Not found ]
[23:32:08]
[23:32:08] Checking for Dica-Kit Rootkit...
[23:32:08]   Checking for file '/lib/.sso'                   [ Not found ]
[23:32:08]   Checking for file '/lib/.so'                    [ Not found ]
[23:32:08]   Checking for file '/var/run/...dica/clean'      [ Not found ]
[23:32:08]   Checking for file '/var/run/...dica/dxr'        [ Not found ]
[23:32:08]   Checking for file '/var/run/...dica/read'       [ Not found ]
[23:32:08]   Checking for file '/var/run/...dica/write'      [ Not found ]
[23:32:08]   Checking for file '/var/run/...dica/lf'         [ Not found ]
[23:32:08]   Checking for file '/var/run/...dica/xl'         [ Not found ]
[23:32:08]   Checking for file '/var/run/...dica/xdr'        [ Not found ]
[23:32:08]   Checking for file '/var/run/...dica/psg'        [ Not found ]
[23:32:08]   Checking for file '/var/run/...dica/secure'     [ Not found ]
[23:32:08]   Checking for file '/var/run/...dica/rdx'        [ Not found ]
[23:32:08]   Checking for file '/var/run/...dica/va'         [ Not found ]
[23:32:08]   Checking for file '/var/run/...dica/cl.sh'      [ Not found ]
[23:32:08]   Checking for file '/var/run/...dica/last.log'   [ Not found ]
[23:32:08]   Checking for file '/usr/bin/.etc'               [ Not found ]
[23:32:09]   Checking for file '/etc/sshd_config'            [ Not found ]
[23:32:09]   Checking for file '/etc/ssh_host_key'           [ Not found ]
[23:32:09]   Checking for file '/etc/ssh_random_seed'        [ Not found ]
[23:32:09]   Checking for directory '/var/run/...dica'       [ Not found ]
[23:32:09]   Checking for directory '/var/run/...dica/mh'    [ Not found ]
[23:32:09]   Checking for directory '/var/run/...dica/scan'  [ Not found ]
[23:32:09] Dica-Kit Rootkit                                  [ Not found ]
[23:32:09]
[23:32:09] Checking for Dreams Rootkit...
[23:32:09]   Checking for file '/dev/ttyoa'                  [ Not found ]
[23:32:09]   Checking for file '/dev/ttyof'                  [ Not found ]
[23:32:09]   Checking for file '/dev/ttyop'                  [ Not found ]
[23:32:09]   Checking for file '/usr/bin/sense'              [ Not found ]
[23:32:09]   Checking for file '/usr/bin/sl2'                [ Not found ]
[23:32:09]   Checking for file '/usr/bin/logclear'           [ Not found ]
[23:32:09]   Checking for file '/usr/bin/(swapd)'            [ Not found ]
[23:32:09]   Checking for file '/usr/bin/initrd'             [ Not found ]
[23:32:09]   Checking for file '/usr/bin/crontabs'           [ Not found ]
[23:32:09]   Checking for file '/usr/bin/snfs'               [ Not found ]
[23:32:09]   Checking for file '/usr/lib/libsss'             [ Not found ]
[23:32:09]   Checking for file '/usr/lib/libsnf.log'         [ Not found ]
[23:32:09]   Checking for file '/usr/lib/libshtift/top'      [ Not found ]
[23:32:09]   Checking for file '/usr/lib/libshtift/ps'       [ Not found ]
[23:32:09]   Checking for file '/usr/lib/libshtift/netstat'  [ Not found ]
[23:32:09]   Checking for file '/usr/lib/libshtift/ls'       [ Not found ]
[23:32:09]   Checking for file '/usr/lib/libshtift/ifconfig' [ Not found ]
[23:32:09]   Checking for file '/usr/include/linseed.h'      [ Not found ]
[23:32:09]   Checking for file '/usr/include/linpid.h'       [ Not found ]
[23:32:09]   Checking for file '/usr/include/linkey.h'       [ Not found ]
[23:32:09]   Checking for file '/usr/include/linconf.h'      [ Not found ]
[23:32:10]   Checking for file '/usr/include/iceseed.h'      [ Not found ]
[23:32:10]   Checking for file '/usr/include/icepid.h'       [ Not found ]
[23:32:10]   Checking for file '/usr/include/icekey.h'       [ Not found ]
[23:32:10]   Checking for file '/usr/include/iceconf.h'      [ Not found ]
[23:32:10]   Checking for directory '/dev/ida/.hpd'          [ Not found ]
[23:32:10]   Checking for directory '/usr/lib/libshtift'     [ Not found ]
[23:32:10] Dreams Rootkit                                    [ Not found ]
[23:32:10]
[23:32:10] Checking for Duarawkz Rootkit...
[23:32:10]   Checking for file '/usr/bin/duarawkz/loginpass' [ Not found ]
[23:32:10]   Checking for directory '/usr/bin/duarawkz'      [ Not found ]
[23:32:10] Duarawkz Rootkit                                  [ Not found ]
[23:32:10]
[23:32:10] Checking for Ebury backdoor...
[23:32:10]   Checking for file '/lib/libns2.so'              [ Not found ]
[23:32:10]   Checking for file '/lib64/libns2.so'            [ Not found ]
[23:32:10]   Checking for file '/lib/libns5.so'              [ Not found ]
[23:32:10]   Checking for file '/lib64/libns5.so'            [ Not found ]
[23:32:10]   Checking for file '/lib/libpw3.so'              [ Not found ]
[23:32:10]   Checking for file '/lib64/libpw3.so'            [ Not found ]
[23:32:10]   Checking for file '/lib/libpw5.so'              [ Not found ]
[23:32:10]   Checking for file '/lib64/libpw5.so'            [ Not found ]
[23:32:10]   Checking for file '/lib/libsbr.so'              [ Not found ]
[23:32:10]   Checking for file '/lib64/libsbr.so'            [ Not found ]
[23:32:10]   Checking for file '/lib/libslr.so'              [ Not found ]
[23:32:10]   Checking for file '/lib64/libslr.so'            [ Not found ]
[23:32:10]   Checking for file '/lib/tls/libkeyutils.so.1'   [ Not found ]
[23:32:10]   Checking for file '/lib64/tls/libkeyutils.so.1' [ Not found ]
[23:32:11] Ebury backdoor                                    [ Not found ]
[23:32:11]
[23:32:11] Checking for Enye LKM...
[23:32:11]   Checking for file '/etc/.enyelkmHIDE^IT.ko'     [ Not found ]
[23:32:11]   Checking for file '/etc/.enyelkmOCULTAR.ko'     [ Not found ]
[23:32:11] Enye LKM                                          [ Not found ]
[23:32:11]
[23:32:11] Checking for Flea Linux Rootkit...
[23:32:11]   Checking for file '/etc/ld.so.hash'             [ Not found ]
[23:32:11]   Checking for file '/lib/security/.config/ssh/sshd_config' [ Not found ]
[23:32:11]   Checking for file '/lib/security/.config/ssh/ssh_host_key' [ Not found ]
[23:32:11]   Checking for file '/lib/security/.config/ssh/ssh_host_key.pub' [ Not found ]
[23:32:11]   Checking for file '/lib/security/.config/ssh/ssh_random_seed' [ Not found ]
[23:32:11]   Checking for file '/usr/bin/ssh2d'              [ Not found ]
[23:32:11]   Checking for file '/usr/lib/ldlibns.so'         [ Not found ]
[23:32:11]   Checking for file '/usr/lib/ldlibps.so'         [ Not found ]
[23:32:11]   Checking for file '/usr/lib/ldlibpst.so'        [ Not found ]
[23:32:11]   Checking for file '/usr/lib/ldlibdu.so'         [ Not found ]
[23:32:11]   Checking for file '/usr/lib/ldlibct.so'         [ Not found ]
[23:32:11]   Checking for directory '/lib/security/.config/ssh' [ Not found ]
[23:32:11]   Checking for directory '/dev/..0'               [ Not found ]
[23:32:11]   Checking for directory '/dev/..0/backup'        [ Not found ]
[23:32:11] Flea Linux Rootkit                                [ Not found ]
[23:32:11]
[23:32:11] Checking for Fu Rootkit...
[23:32:11]   Checking for file '/sbin/xc'                    [ Not found ]
[23:32:11]   Checking for file '/usr/include/ivtype.h'       [ Not found ]
[23:32:12]   Checking for file '/bin/.lib'                   [ Not found ]
[23:32:12] Fu Rootkit                                        [ Not found ]
[23:32:12]
[23:32:12] Checking for Fuck`it Rootkit...
[23:32:12]   Checking for file '/lib/libproc.so.2.0.7'       [ Not found ]
[23:32:12]   Checking for file '/dev/proc/.bash_profile'     [ Not found ]
[23:32:12]   Checking for file '/dev/proc/.bashrc'           [ Not found ]
[23:32:12]   Checking for file '/dev/proc/.cshrc'            [ Not found ]
[23:32:12]   Checking for file '/dev/proc/fuckit/hax0r'      [ Not found ]
[23:32:12]   Checking for file '/dev/proc/fuckit/hax0rshell' [ Not found ]
[23:32:12]   Checking for file '/dev/proc/fuckit/config/lports' [ Not found ]
[23:32:12]   Checking for file '/dev/proc/fuckit/config/rports' [ Not found ]
[23:32:12]   Checking for file '/dev/proc/fuckit/config/rkconf' [ Not found ]
[23:32:12]   Checking for file '/dev/proc/fuckit/config/password' [ Not found ]
[23:32:12]   Checking for file '/dev/proc/fuckit/config/progs' [ Not found ]
[23:32:12]   Checking for file '/dev/proc/fuckit/system-bins/init' [ Not found ]
[23:32:12]   Checking for file '/usr/lib/libcps.a'           [ Not found ]
[23:32:12]   Checking for file '/usr/lib/libtty.a'           [ Not found ]
[23:32:12]   Checking for directory '/dev/proc'              [ Not found ]
[23:32:12]   Checking for directory '/dev/proc/fuckit'       [ Not found ]
[23:32:12]   Checking for directory '/dev/proc/fuckit/system-bins' [ Not found ]
[23:32:12]   Checking for directory '/dev/proc/toolz'        [ Not found ]
[23:32:12] Fuck`it Rootkit                                   [ Not found ]
[23:32:12]
[23:32:12] Checking for GasKit Rootkit...
[23:32:12]   Checking for file '/dev/dev/gaskit/sshd/sshdd'  [ Not found ]
[23:32:13]   Checking for directory '/dev/dev'               [ Not found ]
[23:32:13]   Checking for directory '/dev/dev/gaskit'        [ Not found ]
[23:32:13]   Checking for directory '/dev/dev/gaskit/sshd'   [ Not found ]
[23:32:13] GasKit Rootkit                                    [ Not found ]
[23:32:13]
[23:32:13] Checking for Heroin LKM...
[23:32:13]   Checking for kernel symbol 'heroin'             [ Not found ]
[23:32:13] Heroin LKM                                        [ Not found ]
[23:32:13]
[23:32:13] Checking for HjC Kit...
[23:32:13]   Checking for directory '/dev/.hijackerz'        [ Not found ]
[23:32:13] HjC Kit                                           [ Not found ]
[23:32:13]
[23:32:13] Checking for ignoKit Rootkit...
[23:32:13]   Checking for file '/lib/defs/p'                 [ Not found ]
[23:32:13]   Checking for file '/lib/defs/q'                 [ Not found ]
[23:32:13]   Checking for file '/lib/defs/r'                 [ Not found ]
[23:32:13]   Checking for file '/lib/defs/s'                 [ Not found ]
[23:32:13]   Checking for file '/lib/defs/t'                 [ Not found ]
[23:32:13]   Checking for file '/usr/lib/defs/p'             [ Not found ]
[23:32:13]   Checking for file '/usr/lib/defs/q'             [ Not found ]
[23:32:13]   Checking for file '/usr/lib/defs/r'             [ Not found ]
[23:32:13]   Checking for file '/usr/lib/defs/s'             [ Not found ]
[23:32:13]   Checking for file '/usr/lib/defs/t'             [ Not found ]
[23:32:13]   Checking for file '/usr/lib/.libigno/pkunsec'   [ Not found ]
[23:32:13]   Checking for file '/usr/lib/.libigno/.igno/psybnc/psybnc' [ Not found ]
[23:32:13]   Checking for directory '/usr/lib/.libigno'      [ Not found ]
[23:32:13]   Checking for directory '/usr/lib/.libigno/.igno' [ Not found ]
[23:32:14] ignoKit Rootkit                                   [ Not found ]
[23:32:14]
[23:32:14] Checking for IntoXonia-NG Rootkit...
[23:32:14]   Checking for kernel symbol 'funces'             [ Not found ]
[23:32:14]   Checking for kernel symbol 'ixinit'             [ Not found ]
[23:32:14]   Checking for kernel symbol 'tricks'             [ Not found ]
[23:32:14]   Checking for kernel symbol 'kernel_unlink'      [ Not found ]
[23:32:14]   Checking for kernel symbol 'rootme'             [ Not found ]
[23:32:14]   Checking for kernel symbol 'hide_module'        [ Not found ]
[23:32:14]   Checking for kernel symbol 'find_sys_call_tbl'  [ Not found ]
[23:32:14] IntoXonia-NG Rootkit                              [ Not found ]
[23:32:14]
[23:32:14] Checking for Irix Rootkit...
[23:32:14]   Checking for directory '/dev/pts/01'            [ Not found ]
[23:32:14]   Checking for directory '/dev/pts/01/backup'     [ Not found ]
[23:32:15]   Checking for directory '/dev/pts/01/etc'        [ Not found ]
[23:32:15]   Checking for directory '/dev/pts/01/tmp'        [ Not found ]
[23:32:15] Irix Rootkit                                      [ Not found ]
[23:32:15]
[23:32:15] Checking for Jynx Rootkit...
[23:32:15]   Checking for file '/xochikit/bc'                [ Not found ]
[23:32:15]   Checking for file '/xochikit/ld_poison.so'      [ Not found ]
[23:32:15]   Checking for file '/omgxochi/bc'                [ Not found ]
[23:32:15]   Checking for file '/omgxochi/ld_poison.so'      [ Not found ]
[23:32:15]   Checking for file '/var/local/^^/bc'            [ Not found ]
[23:32:15]   Checking for file '/var/local/^^/ld_poison.so'  [ Not found ]
[23:32:15]   Checking for directory '/xochikit'              [ Not found ]
[23:32:15]   Checking for directory '/omgxochi'              [ Not found ]
[23:32:15]   Checking for directory '/var/local/^^'          [ Not found ]
[23:32:15] Jynx Rootkit                                      [ Not found ]
[23:32:15]
[23:32:15] Checking for Jynx2 Rootkit...
[23:32:15]   Checking for file '/XxJynx/reality.so'          [ Not found ]
[23:32:15]   Checking for directory '/XxJynx'                [ Not found ]
[23:32:15] Jynx2 Rootkit                                     [ Not found ]
[23:32:15]
[23:32:15] Checking for KBeast Rootkit...
[23:32:15]   Checking for file '/usr/_h4x_/ipsecs-kbeast-v1.ko' [ Not found ]
[23:32:15]   Checking for file '/usr/_h4x_/_h4x_bd'          [ Not found ]
[23:32:15]   Checking for file '/usr/_h4x_/acctlog'          [ Not found ]
[23:32:15]   Checking for directory '/usr/_h4x_'             [ Not found ]
[23:32:16]   Checking for kernel symbol 'h4x_delete_module'  [ Not found ]
[23:32:16]   Checking for kernel symbol 'h4x_getdents64'     [ Not found ]
[23:32:16]   Checking for kernel symbol 'h4x_kill'           [ Not found ]
[23:32:16]   Checking for kernel symbol 'h4x_open'           [ Not found ]
[23:32:16]   Checking for kernel symbol 'h4x_read'           [ Not found ]
[23:32:16]   Checking for kernel symbol 'h4x_rename'         [ Not found ]
[23:32:16]   Checking for kernel symbol 'h4x_rmdir'          [ Not found ]
[23:32:16]   Checking for kernel symbol 'h4x_tcp4_seq_show'  [ Not found ]
[23:32:16]   Checking for kernel symbol 'h4x_write'          [ Not found ]
[23:32:16] KBeast Rootkit                                    [ Not found ]
[23:32:16]
[23:32:16] Checking for Kitko Rootkit...
[23:32:17]   Checking for directory '/usr/src/redhat/SRPMS/...' [ Not found ]
[23:32:17] Kitko Rootkit                                     [ Not found ]
[23:32:17]
[23:32:17] Checking for Knark Rootkit...
[23:32:17]   Checking for file '/proc/knark/pids'            [ Not found ]
[23:32:17]   Checking for directory '/proc/knark'            [ Not found ]
[23:32:17] Knark Rootkit                                     [ Not found ]
[23:32:17]
[23:32:17] Checking for ld-linuxv.so Rootkit...
[23:32:17]   Checking for file '/lib/ld-linuxv.so.1'         [ Not found ]
[23:32:17]   Checking for directory '/var/opt/_so_cache'     [ Not found ]
[23:32:17]   Checking for directory '/var/opt/_so_cache/ld'  [ Not found ]
[23:32:17]   Checking for directory '/var/opt/_so_cache/lc'  [ Not found ]
[23:32:17] ld-linuxv.so Rootkit                              [ Not found ]
[23:32:17]
[23:32:17] Checking for Li0n Worm...
[23:32:17]   Checking for file '/bin/in.telnetd'             [ Not found ]
[23:32:17]   Checking for file '/bin/mjy'                    [ Not found ]
[23:32:17]   Checking for file '/usr/man/man1/man1/lib/.lib/mjy' [ Not found ]
[23:32:17]   Checking for file '/usr/man/man1/man1/lib/.lib/in.telnetd' [ Not found ]
[23:32:17]   Checking for file '/usr/man/man1/man1/lib/.lib/.x' [ Not found ]
[23:32:17]   Checking for file '/dev/.lib/lib/scan/1i0n.sh'  [ Not found ]
[23:32:17]   Checking for file '/dev/.lib/lib/scan/hack.sh'  [ Not found ]
[23:32:17]   Checking for file '/dev/.lib/lib/scan/bind'     [ Not found ]
[23:32:17]   Checking for file '/dev/.lib/lib/scan/randb'    [ Not found ]
[23:32:17]   Checking for file '/dev/.lib/lib/scan/scan.sh'  [ Not found ]
[23:32:17]   Checking for file '/dev/.lib/lib/scan/pscan'    [ Not found ]
[23:32:17]   Checking for file '/dev/.lib/lib/scan/star.sh'  [ Not found ]
[23:32:17]   Checking for file '/dev/.lib/lib/scan/bindx.sh' [ Not found ]
[23:32:17]   Checking for file '/dev/.lib/lib/scan/bindname.log' [ Not found ]
[23:32:18]   Checking for file '/dev/.lib/lib/1i0n.sh'       [ Not found ]
[23:32:18]   Checking for file '/dev/.lib/lib/lib/netstat'   [ Not found ]
[23:32:18]   Checking for file '/dev/.lib/lib/lib/dev/.1addr' [ Not found ]
[23:32:18]   Checking for file '/dev/.lib/lib/lib/dev/.1logz' [ Not found ]
[23:32:18]   Checking for file '/dev/.lib/lib/lib/dev/.1proc' [ Not found ]
[23:32:18]   Checking for file '/dev/.lib/lib/lib/dev/.1file' [ Not found ]
[23:32:18] Li0n Worm                                         [ Not found ]
[23:32:18]
[23:32:18] Checking for Lockit / LJK2 Rootkit...
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_config' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_host_key' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_host_key.pub' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_random_seed*' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/sshd_config' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/backdoor/RK1bd' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/du' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ifconfig' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/inetd.conf' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/locate' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/login' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ls' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/netstat' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ps' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/pstree' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/rc.sysinit' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/syslogd' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/tcpd' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/top' [ Not found ]
[23:32:18]   Checking for file '/usr/lib/libmen.oo/.LJK2/clean/RK1sauber' [ Not found ]
[23:32:19]   Checking for file '/usr/lib/libmen.oo/.LJK2/clean/RK1wted' [ Not found ]
[23:32:19]   Checking for file '/usr/lib/libmen.oo/.LJK2/hack/RK1parse' [ Not found ]
[23:32:19]   Checking for file '/usr/lib/libmen.oo/.LJK2/hack/RK1sniff' [ Not found ]
[23:32:19]   Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1addr' [ Not found ]
[23:32:19]   Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1dir' [ Not found ]
[23:32:19]   Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1log' [ Not found ]
[23:32:19]   Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1proc' [ Not found ]
[23:32:19]   Checking for file '/usr/lib/libmen.oo/.LJK2/hide/RK1phidemod.c' [ Not found ]
[23:32:19]   Checking for file '/usr/lib/libmen.oo/.LJK2/modules/README.modules' [ Not found ]
[23:32:19]   Checking for file '/usr/lib/libmen.oo/.LJK2/modules/RK1hidem.c' [ Not found ]
[23:32:19]   Checking for file '/usr/lib/libmen.oo/.LJK2/modules/RK1phide' [ Not found ]
[23:32:19]   Checking for file '/usr/lib/libmen.oo/.LJK2/sshconfig/RK1ssh' [ Not found ]
[23:32:19]   Checking for directory '/usr/lib/libmen.oo/.LJK2' [ Not found ]
[23:32:19] Lockit / LJK2 Rootkit                             [ Not found ]
[23:32:19]
[23:32:19] Checking for Mokes backdoor...
[23:32:19]   Checking for file '/tmp/ss0-[0-9][0-9][0-9][0-9][0-9][0-9]-[0-9][0-9][0-9][0-9][0-9][0-9]-[0-9][0-9][0-9].sst' [ Not found ]
[23:32:19]   Checking for file '/tmp/aa0-[0-9][0-9][0-9][0-9][0-9][0-9]-[0-9][0-9][0-9][0-9][0-9][0-9]-[0-9][0-9][0-9].aat' [ Not found ]
[23:32:19]   Checking for file '/tmp/kk0-[0-9][0-9][0-9][0-9][0-9][0-9]-[0-9][0-9][0-9][0-9][0-9][0-9]-[0-9][0-9][0-9].kkt' [ Not found ]
[23:32:19]   Checking for file '/tmp/dd0-[0-9][0-9][0-9][0-9][0-9][0-9]-[0-9][0-9][0-9][0-9][0-9][0-9]-[0-9][0-9][0-9].ddt' [ Not found ]
[23:32:19] Mokes backdoor                                    [ Not found ]
[23:32:19]
[23:32:19] Checking for Mood-NT Rootkit...
[23:32:19]   Checking for file '/sbin/init__mood-nt-_-_cthulhu' [ Not found ]
[23:32:19]   Checking for file '/_cthulhu/mood-nt.init'      [ Not found ]
[23:32:19]   Checking for file '/_cthulhu/mood-nt.conf'      [ Not found ]
[23:32:19]   Checking for file '/_cthulhu/mood-nt.sniff'     [ Not found ]
[23:32:19]   Checking for directory '/_cthulhu'              [ Not found ]
[23:32:19] Mood-NT Rootkit                                   [ Not found ]
[23:32:20]
[23:32:20] Checking for MRK Rootkit...
[23:32:20]   Checking for file '/dev/ida/.inet/pid'          [ Not found ]
[23:32:20]   Checking for file '/dev/ida/.inet/ssh_host_key' [ Not found ]
[23:32:20]   Checking for file '/dev/ida/.inet/ssh_random_seed' [ Not found ]
[23:32:20]   Checking for file '/dev/ida/.inet/tcp.log'      [ Not found ]
[23:32:20]   Checking for directory '/dev/ida/.inet'         [ Not found ]
[23:32:20]   Checking for directory '/var/spool/cron/.sh'    [ Not found ]
[23:32:20] MRK Rootkit                                       [ Not found ]
[23:32:20]
[23:32:20] Checking for Ni0 Rootkit...
[23:32:20]   Checking for file '/var/lock/subsys/...datafile.../...net...' [ Not found ]
[23:32:20]   Checking for file '/var/lock/subsys/...datafile.../...port...' [ Not found ]
[23:32:20]   Checking for file '/var/lock/subsys/...datafile.../...ps...' [ Not found ]
[23:32:20]   Checking for file '/var/lock/subsys/...datafile.../...file...' [ Not found ]
[23:32:20]   Checking for directory '/tmp/waza'              [ Not found ]
[23:32:20]   Checking for directory '/var/lock/subsys/...datafile...' [ Not found ]
[23:32:20]   Checking for directory '/usr/sbin/es'           [ Not found ]
[23:32:20] Ni0 Rootkit                                       [ Not found ]
[23:32:20]
[23:32:20] Checking for Ohhara Rootkit...
[23:32:20]   Checking for file '/var/lock/subsys/...datafile.../...datafile.../in.smbd.log' [ Not found ]
[23:32:20]   Checking for directory '/var/lock/subsys/...datafile...' [ Not found ]
[23:32:20]   Checking for directory '/var/lock/subsys/...datafile.../...datafile...' [ Not found ]
[23:32:20]   Checking for directory '/var/lock/subsys/...datafile.../...datafile.../bin' [ Not found ]
[23:32:20]   Checking for directory '/var/lock/subsys/...datafile.../...datafile.../usr/bin' [ Not found ]
[23:32:20]   Checking for directory '/var/lock/subsys/...datafile.../...datafile.../usr/sbin' [ Not found ]
[23:32:20]   Checking for directory '/var/lock/subsys/...datafile.../...datafile.../lib/security' [ Not found ]
[23:32:20] Ohhara Rootkit                                    [ Not found ]
[23:32:21]
[23:32:21] Checking for Optic Kit (Tux) Worm...
[23:32:21]   Checking for directory '/dev/tux'               [ Not found ]
[23:32:21]   Checking for directory '/usr/bin/xchk'          [ Not found ]
[23:32:21]   Checking for directory '/usr/bin/xsf'           [ Not found ]
[23:32:21]   Checking for directory '/usr/bin/ssh2d'         [ Not found ]
[23:32:21] Optic Kit (Tux) Worm                              [ Not found ]
[23:32:21]
[23:32:21] Checking for Oz Rootkit...
[23:32:21]   Checking for file '/dev/.oz/.nap/rkit/terror'   [ Not found ]
[23:32:21]   Checking for directory '/dev/.oz'               [ Not found ]
[23:32:21] Oz Rootkit                                        [ Not found ]
[23:32:21]
[23:32:21] Checking for Phalanx Rootkit...
[23:32:21]   Checking for file '/uNFuNF'                     [ Not found ]
[23:32:21]   Checking for file '/etc/host.ph1'               [ Not found ]
[23:32:21]   Checking for file '/bin/host.ph1'               [ Not found ]
[23:32:21]   Checking for file '/usr/share/.home.ph1/phalanx' [ Not found ]
[23:32:21]   Checking for file '/usr/share/.home.ph1/cb'     [ Not found ]
[23:32:21]   Checking for file '/usr/share/.home.ph1/kebab'  [ Not found ]
[23:32:21]   Checking for directory '/usr/share/.home.ph1'   [ Not found ]
[23:32:21]   Checking for directory '/usr/share/.home.ph1/tty' [ Not found ]
[23:32:21] Phalanx Rootkit                                   [ Not found ]
[23:32:21]
[23:32:21] Checking for Phalanx2 Rootkit...
[23:32:21]   Checking for file '/etc/khubd.p2/.p2rc'         [ Not found ]
[23:32:21]   Checking for file '/etc/khubd.p2/.phalanx2'     [ Not found ]
[23:32:21]   Checking for file '/etc/khubd.p2/.sniff'        [ Not found ]
[23:32:22]   Checking for file '/etc/khubd.p2/sshgrab.py'    [ Not found ]
[23:32:22]   Checking for file '/etc/lolzz.p2/.p2rc'         [ Not found ]
[23:32:22]   Checking for file '/etc/lolzz.p2/.phalanx2'     [ Not found ]
[23:32:22]   Checking for file '/etc/lolzz.p2/.sniff'        [ Not found ]
[23:32:22]   Checking for file '/etc/lolzz.p2/sshgrab.py'    [ Not found ]
[23:32:22]   Checking for file '/etc/cron.d/zupzzplaceholder' [ Not found ]
[23:32:22]   Checking for file '/usr/lib/zupzz.p2/.p-2.3d'   [ Not found ]
[23:32:22]   Checking for file '/usr/lib/zupzz.p2/.p2rc'     [ Not found ]
[23:32:22]   Checking for directory '/etc/khubd.p2'          [ Not found ]
[23:32:22]   Checking for directory '/etc/lolzz.p2'          [ Not found ]
[23:32:22]   Checking for directory '/usr/lib/zupzz.p2'      [ Not found ]
[23:32:22] Phalanx2 Rootkit                                  [ Not found ]
[23:32:22]
[23:32:22] Checking for Phalanx2 Rootkit (extended tests)...
[23:32:22]   Checking for directory '/etc/khubd.p2'          [ Not found ]
[23:32:22]   Checking for directory '/etc/lolzz.p2'          [ Not found ]
[23:32:22]   Checking for directory '/usr/lib/zupzz.p2'      [ Not found ]
[23:32:22] Phalanx2 Rootkit (extended tests)                 [ Not found ]
[23:32:22]
[23:32:22] Checking for Portacelo Rootkit...
[23:32:22]   Checking for file '/var/lib/.../.ak'            [ Not found ]
[23:32:22]   Checking for file '/var/lib/.../.hk'            [ Not found ]
[23:32:22]   Checking for file '/var/lib/.../.rs'            [ Not found ]
[23:32:22]   Checking for file '/var/lib/.../.p'             [ Not found ]
[23:32:22]   Checking for file '/var/lib/.../getty'          [ Not found ]
[23:32:22]   Checking for file '/var/lib/.../lkt.o'          [ Not found ]
[23:32:22]   Checking for file '/var/lib/.../show'           [ Not found ]
[23:32:23]   Checking for file '/var/lib/.../nlkt.o'         [ Not found ]
[23:32:23]   Checking for file '/var/lib/.../ssshrc'         [ Not found ]
[23:32:23]   Checking for file '/var/lib/.../sssh_equiv'     [ Not found ]
[23:32:23]   Checking for file '/var/lib/.../sssh_known_hosts' [ Not found ]
[23:32:23]   Checking for file '/var/lib/.../sssh_pid'       [ Not found ]
[23:32:23]   Checking for file '~/.sssh/known_hosts'         [ Not found ]
[23:32:23] Portacelo Rootkit                                 [ Not found ]
[23:32:23]
[23:32:23] Checking for R3dstorm Toolkit...
[23:32:23]   Checking for file '/var/log/tk02/see_all'       [ Not found ]
[23:32:23]   Checking for file '/var/log/tk02/.scris'        [ Not found ]
[23:32:23]   Checking for file '/bin/.../sshd/sbin/sshd1'    [ Not found ]
[23:32:23]   Checking for file '/bin/.../hate/sk'            [ Not found ]
[23:32:23]   Checking for file '/bin/.../see_all'            [ Not found ]
[23:32:23]   Checking for directory '/var/log/tk02'          [ Not found ]
[23:32:23]   Checking for directory '/var/log/tk02/old'      [ Not found ]
[23:32:23]   Checking for directory '/bin/...'               [ Not found ]
[23:32:23] R3dstorm Toolkit                                  [ Not found ]
[23:32:23]
[23:32:23] Checking for RH-Sharpe's Rootkit...
[23:32:23]   Checking for file '/bin/lps'                    [ Not found ]
[23:32:23]   Checking for file '/usr/bin/lpstree'            [ Not found ]
[23:32:23]   Checking for file '/usr/bin/ltop'               [ Not found ]
[23:32:23]   Checking for file '/usr/bin/lkillall'           [ Not found ]
[23:32:23]   Checking for file '/usr/bin/ldu'                [ Not found ]
[23:32:23]   Checking for file '/usr/bin/lnetstat'           [ Not found ]
[23:32:23]   Checking for file '/usr/bin/wp'                 [ Not found ]
[23:32:23]   Checking for file '/usr/bin/shad'               [ Not found ]
[23:32:24]   Checking for file '/usr/bin/vadim'              [ Not found ]
[23:32:24]   Checking for file '/usr/bin/slice'              [ Not found ]
[23:32:24]   Checking for file '/usr/bin/cleaner'            [ Not found ]
[23:32:24]   Checking for file '/usr/include/rpcsvc/du'      [ Not found ]
[23:32:24] RH-Sharpe's Rootkit                               [ Not found ]
[23:32:24]
[23:32:24] Checking for RSHA's Rootkit...
[23:32:24]   Checking for file '/bin/kr4p'                   [ Not found ]
[23:32:24]   Checking for file '/usr/bin/n3tstat'            [ Not found ]
[23:32:24]   Checking for file '/usr/bin/chsh2'              [ Not found ]
[23:32:24]   Checking for file '/usr/bin/slice2'             [ Not found ]
[23:32:24]   Checking for file '/usr/src/linux/arch/alpha/lib/.lib/.1proc' [ Not found ]
[23:32:24]   Checking for file '/etc/rc.d/arch/alpha/lib/.lib/.1addr' [ Not found ]
[23:32:24]   Checking for directory '/etc/rc.d/rsha'         [ Not found ]
[23:32:24]   Checking for directory '/etc/rc.d/arch/alpha/lib/.lib' [ Not found ]
[23:32:24] RSHA's Rootkit                                    [ Not found ]
[23:32:24]
[23:32:24] Checking for Scalper Worm...
[23:32:24]   Checking for file '/tmp/.a'                     [ Not found ]
[23:32:24]   Checking for file '/tmp/.uua'                   [ Not found ]
[23:32:24] Scalper Worm                                      [ Not found ]
[23:32:24]
[23:32:24] Checking for Sebek LKM...
[23:32:24]   Checking for kernel symbol 'adore or sebek'     [ Not found ]
[23:32:24] Sebek LKM                                         [ Not found ]
[23:32:24]
[23:32:24] Checking for Shutdown Rootkit...
[23:32:25]   Checking for file '/usr/man/man5/..<SP>/.dir/scannah/asus' [ Not found ]
[23:32:25]   Checking for file '/usr/man/man5/..<SP>/.dir/see' [ Not found ]
[23:32:25]   Checking for file '/usr/man/man5/..<SP>/.dir/nscd' [ Not found ]
[23:32:25]   Checking for file '/usr/man/man5/..<SP>/.dir/alpd' [ Not found ]
[23:32:25]   Checking for file '/etc/rc.d/rc.local<SP>'      [ Not found ]
[23:32:25]   Checking for directory '/usr/man/man5/..<SP>/.dir' [ Not found ]
[23:32:25]   Checking for directory '/usr/man/man5/..<SP>/.dir/scannah' [ Not found ]
[23:32:25]   Checking for directory '/etc/rc.d/rc0.d/..<SP>/.dir' [ Not found ]
[23:32:25] Shutdown Rootkit                                  [ Not found ]
[23:32:25]
[23:32:25] Checking for SHV4 Rootkit...
[23:32:25]   Checking for file '/etc/ld.so.hash'             [ Not found ]
[23:32:25]   Checking for file '/lib/libext-2.so.7'          [ Not found ]
[23:32:25]   Checking for file '/lib/lidps1.so'              [ Not found ]
[23:32:25]   Checking for file '/lib/libproc.a'              [ Not found ]
[23:32:25]   Checking for file '/lib/libproc.so.2.0.6'       [ Not found ]
[23:32:25]   Checking for file '/lib/ldd.so/tks'             [ Not found ]
[23:32:25]   Checking for file '/lib/ldd.so/tkp'             [ Not found ]
[23:32:25]   Checking for file '/lib/ldd.so/tksb'            [ Not found ]
[23:32:25]   Checking for file '/lib/security/.config/sshd'  [ Not found ]
[23:32:25]   Checking for file '/lib/security/.config/ssh/ssh_host_key' [ Not found ]
[23:32:25]   Checking for file '/lib/security/.config/ssh/ssh_host_key.pub' [ Not found ]
[23:32:25]   Checking for file '/lib/security/.config/ssh/ssh_random_seed' [ Not found ]
[23:32:25]   Checking for file '/usr/include/file.h'         [ Not found ]
[23:32:25]   Checking for file '/usr/include/hosts.h'        [ Not found ]
[23:32:25]   Checking for file '/usr/include/lidps1.so'      [ Not found ]
[23:32:25]   Checking for file '/usr/include/log.h'          [ Not found ]
[23:32:25]   Checking for file '/usr/include/proc.h'         [ Not found ]
[23:32:25]   Checking for file '/usr/sbin/xntps'             [ Not found ]
[23:32:25]   Checking for file '/dev/srd0'                   [ Not found ]
[23:32:26]   Checking for directory '/lib/ldd.so'            [ Not found ]
[23:32:26]   Checking for directory '/lib/security/.config'  [ Not found ]
[23:32:26]   Checking for directory '/lib/security/.config/ssh' [ Not found ]
[23:32:26] SHV4 Rootkit                                      [ Not found ]
[23:32:26]
[23:32:26] Checking for SHV5 Rootkit...
[23:32:26]   Checking for file '/etc/sh.conf'                [ Not found ]
[23:32:26]   Checking for file '/lib/libproc.a'              [ Not found ]
[23:32:26]   Checking for file '/lib/libproc.so.2.0.6'       [ Not found ]
[23:32:26]   Checking for file '/lib/lidps1.so'              [ Not found ]
[23:32:26]   Checking for file '/lib/libsh.so/bash'          [ Not found ]
[23:32:26]   Checking for file '/usr/include/file.h'         [ Not found ]
[23:32:26]   Checking for file '/usr/include/hosts.h'        [ Not found ]
[23:32:26]   Checking for file '/usr/include/log.h'          [ Not found ]
[23:32:26]   Checking for file '/usr/include/proc.h'         [ Not found ]
[23:32:26]   Checking for file '/lib/libsh.so/shdcf2'        [ Not found ]
[23:32:26]   Checking for file '/lib/libsh.so/shhk'          [ Not found ]
[23:32:26]   Checking for file '/lib/libsh.so/shhk.pub'      [ Not found ]
[23:32:26]   Checking for file '/lib/libsh.so/shrs'          [ Not found ]
[23:32:26]   Checking for file '/usr/lib/libsh/.bashrc'      [ Not found ]
[23:32:26]   Checking for file '/usr/lib/libsh/shsb'         [ Not found ]
[23:32:26]   Checking for file '/usr/lib/libsh/hide'         [ Not found ]
[23:32:26]   Checking for file '/usr/lib/libsh/.sniff/shsniff' [ Not found ]
[23:32:26]   Checking for file '/usr/lib/libsh/.sniff/shp'   [ Not found ]
[23:32:26]   Checking for file '/dev/srd0'                   [ Not found ]
[23:32:26]   Checking for directory '/lib/libsh.so'          [ Not found ]
[23:32:26]   Checking for directory '/usr/lib/libsh'         [ Not found ]
[23:32:27]   Checking for directory '/usr/lib/libsh/utilz'   [ Not found ]
[23:32:27]   Checking for directory '/usr/lib/libsh/.backup' [ Not found ]
[23:32:27] SHV5 Rootkit                                      [ Not found ]
[23:32:27]
[23:32:27] Checking for Sin Rootkit...
[23:32:27]   Checking for file '/dev/.haos/haos1/.f/Denyed'  [ Not found ]
[23:32:27]   Checking for file '/dev/ttyoa'                  [ Not found ]
[23:32:27]   Checking for file '/dev/ttyof'                  [ Not found ]
[23:32:27]   Checking for file '/dev/ttyop'                  [ Not found ]
[23:32:27]   Checking for file '/dev/ttyos'                  [ Not found ]
[23:32:27]   Checking for file '/usr/lib/.lib'               [ Not found ]
[23:32:27]   Checking for file '/usr/lib/sn/.X'              [ Not found ]
[23:32:27]   Checking for file '/usr/lib/sn/.sys'            [ Not found ]
[23:32:27]   Checking for file '/usr/lib/ld/.X'              [ Not found ]
[23:32:27]   Checking for file '/usr/man/man1/...'           [ Not found ]
[23:32:27]   Checking for file '/usr/man/man1/.../.m'        [ Not found ]
[23:32:27]   Checking for file '/usr/man/man1/.../.w'        [ Not found ]
[23:32:27]   Checking for directory '/usr/lib/sn'            [ Not found ]
[23:32:27]   Checking for directory '/usr/lib/man1/...'      [ Not found ]
[23:32:27]   Checking for directory '/dev/.haos'             [ Not found ]
[23:32:27] Sin Rootkit                                       [ Not found ]
[23:32:27]
[23:32:27] Checking for Slapper Worm...
[23:32:27]   Checking for file '/tmp/.bugtraq'               [ Not found ]
[23:32:27]   Checking for file '/tmp/.uubugtraq'             [ Not found ]
[23:32:27]   Checking for file '/tmp/.bugtraq.c'             [ Not found ]
[23:32:27]   Checking for file '/tmp/httpd'                  [ Not found ]
[23:32:27]   Checking for file '/tmp/.unlock'                [ Not found ]
[23:32:28]   Checking for file '/tmp/update'                 [ Not found ]
[23:32:28]   Checking for file '/tmp/.cinik'                 [ Not found ]
[23:32:28]   Checking for file '/tmp/.b'                     [ Not found ]
[23:32:28] Slapper Worm                                      [ Not found ]
[23:32:28]
[23:32:28] Checking for Sneakin Rootkit...
[23:32:28]   Checking for directory '/tmp/.X11-unix/.../rk'  [ Not found ]
[23:32:28] Sneakin Rootkit                                   [ Not found ]
[23:32:28]
[23:32:28] Checking for 'Spanish' Rootkit...
[23:32:28]   Checking for file '/dev/ptyq'                   [ Not found ]
[23:32:28]   Checking for file '/bin/ad'                     [ Not found ]
[23:32:28]   Checking for file '/bin/ava'                    [ Not found ]
[23:32:28]   Checking for file '/bin/server'                 [ Not found ]
[23:32:28]   Checking for file '/usr/sbin/rescue'            [ Not found ]
[23:32:28]   Checking for file '/usr/share/.../chrps'        [ Not found ]
[23:32:28]   Checking for file '/usr/share/.../chrifconfig'  [ Not found ]
[23:32:28]   Checking for file '/usr/share/.../netstat'      [ Not found ]
[23:32:28]   Checking for file '/usr/share/.../linsniffer'   [ Not found ]
[23:32:28]   Checking for file '/usr/share/.../charbd'       [ Not found ]
[23:32:28]   Checking for file '/usr/share/.../charbd2'      [ Not found ]
[23:32:28]   Checking for file '/usr/share/.../charbd3'      [ Not found ]
[23:32:28]   Checking for file '/usr/share/.../charbd4'      [ Not found ]
[23:32:28]   Checking for file '/usr/man/tmp/update.tgz'     [ Not found ]
[23:32:28]   Checking for file '/var/lib/rpm/db.rpm'         [ Not found ]
[23:32:28]   Checking for file '/var/cache/man/.cat'         [ Not found ]
[23:32:28]   Checking for file '/var/spool/lpd/remote/.lpq'  [ Not found ]
[23:32:28]   Checking for directory '/usr/share/...'         [ Not found ]
[23:32:29] 'Spanish' Rootkit                                 [ Not found ]
[23:32:29]
[23:32:29] Checking for Suckit Rootkit...
[23:32:29]   Checking for file '/sbin/initsk12'              [ Not found ]
[23:32:29]   Checking for file '/sbin/initxrk'               [ Not found ]
[23:32:29]   Checking for file '/usr/bin/null'               [ Not found ]
[23:32:29]   Checking for file '/usr/share/locale/sk/.sk12/sk' [ Not found ]
[23:32:29]   Checking for file '/etc/rc.d/rc0.d/S23kmdac'    [ Not found ]
[23:32:29]   Checking for file '/etc/rc.d/rc1.d/S23kmdac'    [ Not found ]
[23:32:29]   Checking for file '/etc/rc.d/rc2.d/S23kmdac'    [ Not found ]
[23:32:29]   Checking for file '/etc/rc.d/rc3.d/S23kmdac'    [ Not found ]
[23:32:29]   Checking for file '/etc/rc.d/rc4.d/S23kmdac'    [ Not found ]
[23:32:29]   Checking for file '/etc/rc.d/rc5.d/S23kmdac'    [ Not found ]
[23:32:29]   Checking for file '/etc/rc.d/rc6.d/S23kmdac'    [ Not found ]
[23:32:29]   Checking for directory '/dev/sdhu0/tehdrakg'    [ Not found ]
[23:32:29]   Checking for directory '/etc/.MG'               [ Not found ]
[23:32:29]   Checking for directory '/usr/share/locale/sk/.sk12' [ Not found ]
[23:32:29]   Checking for directory '/usr/lib/perl5/site_perl/i386-linux/auto/TimeDate/.packlist' [ Not found ]
[23:32:29] Suckit Rootkit                                    [ Not found ]
[23:32:29]
[23:32:29] Checking for Superkit Rootkit...
[23:32:29]   Checking for file '/usr/man/.sman/sk/backsh'    [ Not found ]
[23:32:29]   Checking for file '/usr/man/.sman/sk/izbtrag'   [ Not found ]
[23:32:29]   Checking for file '/usr/man/.sman/sk/sksniff'   [ Not found ]
[23:32:29]   Checking for file '/var/www/cgi-bin/cgiback.cgi' [ Not found ]
[23:32:29]   Checking for directory '/usr/man/.sman/sk'      [ Not found ]
[23:32:29] Superkit Rootkit                                  [ Not found ]
[23:32:29]
[23:32:29] Checking for TBD (Telnet BackDoor)...
[23:32:29]   Checking for file '/usr/lib/.tbd'               [ Not found ]
[23:32:29] TBD (Telnet BackDoor)                             [ Not found ]
[23:32:30]
[23:32:30] Checking for TeLeKiT Rootkit...
[23:32:30]   Checking for file '/usr/man/man3/.../TeLeKiT/bin/sniff' [ Not found ]
[23:32:30]   Checking for file '/usr/man/man3/.../TeLeKiT/bin/telnetd' [ Not found ]
[23:32:30]   Checking for file '/usr/man/man3/.../TeLeKiT/bin/teleulo' [ Not found ]
[23:32:30]   Checking for file '/usr/man/man3/.../cl'        [ Not found ]
[23:32:30]   Checking for file '/dev/ptyr'                   [ Not found ]
[23:32:30]   Checking for file '/dev/ptyp'                   [ Not found ]
[23:32:30]   Checking for file '/dev/ptyq'                   [ Not found ]
[23:32:30]   Checking for file '/dev/hda06'                  [ Not found ]
[23:32:30]   Checking for file '/usr/info/libc1.so'          [ Not found ]
[23:32:30]   Checking for directory '/usr/man/man3/...'      [ Not found ]
[23:32:30]   Checking for directory '/usr/man/man3/.../lsniff' [ Not found ]
[23:32:30]   Checking for directory '/usr/man/man3/.../TeLeKiT' [ Not found ]
[23:32:30] TeLeKiT Rootkit                                   [ Not found ]
[23:32:30]
[23:32:30] Checking for T0rn Rootkit...
[23:32:30]   Checking for file '/dev/.lib/lib/lib/t0rns'     [ Not found ]
[23:32:30]   Checking for file '/dev/.lib/lib/lib/du'        [ Not found ]
[23:32:30]   Checking for file '/dev/.lib/lib/lib/ls'        [ Not found ]
[23:32:30]   Checking for file '/dev/.lib/lib/lib/t0rnsb'    [ Not found ]
[23:32:30]   Checking for file '/dev/.lib/lib/lib/ps'        [ Not found ]
[23:32:30]   Checking for file '/dev/.lib/lib/lib/t0rnp'     [ Not found ]
[23:32:30]   Checking for file '/dev/.lib/lib/lib/find'      [ Not found ]
[23:32:30]   Checking for file '/dev/.lib/lib/lib/ifconfig'  [ Not found ]
[23:32:30]   Checking for file '/dev/.lib/lib/lib/pg'        [ Not found ]
[23:32:30]   Checking for file '/dev/.lib/lib/lib/ssh.tgz'   [ Not found ]
[23:32:30]   Checking for file '/dev/.lib/lib/lib/top'       [ Not found ]
[23:32:30]   Checking for file '/dev/.lib/lib/lib/sz'        [ Not found ]
[23:32:30]   Checking for file '/dev/.lib/lib/lib/login'     [ Not found ]
[23:32:30]   Checking for file '/dev/.lib/lib/lib/in.fingerd' [ Not found ]
[23:32:30]   Checking for file '/dev/.lib/lib/lib/1i0n.sh'   [ Not found ]
[23:32:31]   Checking for file '/dev/.lib/lib/lib/pstree'    [ Not found ]
[23:32:31]   Checking for file '/dev/.lib/lib/lib/in.telnetd' [ Not found ]
[23:32:31]   Checking for file '/dev/.lib/lib/lib/mjy'       [ Not found ]
[23:32:31]   Checking for file '/dev/.lib/lib/lib/sush'      [ Not found ]
[23:32:31]   Checking for file '/dev/.lib/lib/lib/tfn'       [ Not found ]
[23:32:31]   Checking for file '/dev/.lib/lib/lib/name'      [ Not found ]
[23:32:31]   Checking for file '/dev/.lib/lib/lib/getip.sh'  [ Not found ]
[23:32:31]   Checking for file '/usr/info/.torn/sh*'         [ Not found ]
[23:32:31]   Checking for file '/usr/src/.puta/.1addr'       [ Not found ]
[23:32:31]   Checking for file '/usr/src/.puta/.1file'       [ Not found ]
[23:32:31]   Checking for file '/usr/src/.puta/.1proc'       [ Not found ]
[23:32:31]   Checking for file '/usr/src/.puta/.1logz'       [ Not found ]
[23:32:31]   Checking for file '/usr/info/.t0rn'             [ Not found ]
[23:32:31]   Checking for directory '/dev/.lib'              [ Not found ]
[23:32:31]   Checking for directory '/dev/.lib/lib'          [ Not found ]
[23:32:31]   Checking for directory '/dev/.lib/lib/lib'      [ Not found ]
[23:32:31]   Checking for directory '/dev/.lib/lib/lib/dev'  [ Not found ]
[23:32:31]   Checking for directory '/dev/.lib/lib/scan'     [ Not found ]
[23:32:31]   Checking for directory '/usr/src/.puta'         [ Not found ]
[23:32:31]   Checking for directory '/usr/man/man1/man1'     [ Not found ]
[23:32:31]   Checking for directory '/usr/man/man1/man1/lib' [ Not found ]
[23:32:31]   Checking for directory '/usr/man/man1/man1/lib/.lib' [ Not found ]
[23:32:31]   Checking for directory '/usr/man/man1/man1/lib/.lib/.backup' [ Not found ]
[23:32:31] T0rn Rootkit                                      [ Not found ]
[23:32:31]
[23:32:31] Checking for trNkit Rootkit...
[23:32:31]   Checking for file '/usr/lib/libbins.la'         [ Not found ]
[23:32:31]   Checking for file '/usr/lib/libtcs.so'          [ Not found ]
[23:32:31]   Checking for file '/dev/.ttpy/ulogin.sh'        [ Not found ]
[23:32:31]   Checking for file '/dev/.ttpy/tcpshell.sh'      [ Not found ]
[23:32:31]   Checking for file '/dev/.ttpy/bupdu'            [ Not found ]
[23:32:31]   Checking for file '/dev/.ttpy/buloc'            [ Not found ]
[23:32:32]   Checking for file '/dev/.ttpy/buloc1'           [ Not found ]
[23:32:32]   Checking for file '/dev/.ttpy/buloc2'           [ Not found ]
[23:32:32]   Checking for file '/dev/.ttpy/stat'             [ Not found ]
[23:32:32]   Checking for file '/dev/.ttpy/backps'           [ Not found ]
[23:32:32]   Checking for file '/dev/.ttpy/tree'             [ Not found ]
[23:32:32]   Checking for file '/dev/.ttpy/topk'             [ Not found ]
[23:32:32]   Checking for file '/dev/.ttpy/wold'             [ Not found ]
[23:32:32]   Checking for file '/dev/.ttpy/whoold'           [ Not found ]
[23:32:32]   Checking for file '/dev/.ttpy/backdoors'        [ Not found ]
[23:32:32] trNkit Rootkit                                    [ Not found ]
[23:32:32]
[23:32:32] Checking for Trojanit Kit...
[23:32:32]   Checking for file '/bin/.ls'                    [ Not found ]
[23:32:32]   Checking for file '/bin/.ps'                    [ Not found ]
[23:32:32]   Checking for file '/bin/.netstat'               [ Not found ]
[23:32:32]   Checking for file '/usr/bin/.nop'               [ Not found ]
[23:32:32]   Checking for file '/usr/bin/.who'               [ Not found ]
[23:32:32] Trojanit Kit                                      [ Not found ]
[23:32:32]
[23:32:32] Checking for Tuxtendo Rootkit...
[23:32:32]   Checking for file '/lib/libproc.so.2.0.7'       [ Not found ]
[23:32:32]   Checking for file '/usr/bin/xchk'               [ Not found ]
[23:32:32]   Checking for file '/usr/bin/xsf'                [ Not found ]
[23:32:32]   Checking for file '/dev/tux/suidsh'             [ Not found ]
[23:32:32]   Checking for file '/dev/tux/.addr'              [ Not found ]
[23:32:32]   Checking for file '/dev/tux/.cron'              [ Not found ]
[23:32:32]   Checking for file '/dev/tux/.file'              [ Not found ]
[23:32:32]   Checking for file '/dev/tux/.log'               [ Not found ]
[23:32:33]   Checking for file '/dev/tux/.proc'              [ Not found ]
[23:32:33]   Checking for file '/dev/tux/.iface'             [ Not found ]
[23:32:33]   Checking for file '/dev/tux/.pw'                [ Not found ]
[23:32:33]   Checking for file '/dev/tux/.df'                [ Not found ]
[23:32:33]   Checking for file '/dev/tux/.ssh'               [ Not found ]
[23:32:33]   Checking for file '/dev/tux/.tux'               [ Not found ]
[23:32:33]   Checking for file '/dev/tux/ssh2/sshd2_config'  [ Not found ]
[23:32:33]   Checking for file '/dev/tux/ssh2/hostkey'       [ Not found ]
[23:32:33]   Checking for file '/dev/tux/ssh2/hostkey.pub'   [ Not found ]
[23:32:33]   Checking for file '/dev/tux/ssh2/logo'          [ Not found ]
[23:32:33]   Checking for file '/dev/tux/ssh2/random_seed'   [ Not found ]
[23:32:33]   Checking for file '/dev/tux/backup/crontab'     [ Not found ]
[23:32:33]   Checking for file '/dev/tux/backup/df'          [ Not found ]
[23:32:33]   Checking for file '/dev/tux/backup/dir'         [ Not found ]
[23:32:33]   Checking for file '/dev/tux/backup/find'        [ Not found ]
[23:32:33]   Checking for file '/dev/tux/backup/ifconfig'    [ Not found ]
[23:32:33]   Checking for file '/dev/tux/backup/locate'      [ Not found ]
[23:32:33]   Checking for file '/dev/tux/backup/netstat'     [ Not found ]
[23:32:33]   Checking for file '/dev/tux/backup/ps'          [ Not found ]
[23:32:33]   Checking for file '/dev/tux/backup/pstree'      [ Not found ]
[23:32:33]   Checking for file '/dev/tux/backup/syslogd'     [ Not found ]
[23:32:33]   Checking for file '/dev/tux/backup/tcpd'        [ Not found ]
[23:32:33]   Checking for file '/dev/tux/backup/top'         [ Not found ]
[23:32:33]   Checking for file '/dev/tux/backup/updatedb'    [ Not found ]
[23:32:33]   Checking for file '/dev/tux/backup/vdir'        [ Not found ]
[23:32:33]   Checking for directory '/dev/tux'               [ Not found ]
[23:32:33]   Checking for directory '/dev/tux/ssh2'          [ Not found ]
[23:32:33]   Checking for directory '/dev/tux/backup'        [ Not found ]
[23:32:34] Tuxtendo Rootkit                                  [ Not found ]
[23:32:34]
[23:32:34] Checking for URK Rootkit...
[23:32:34]   Checking for file '/dev/prom/sn.l'              [ Not found ]
[23:32:34]   Checking for file '/usr/lib/ldlibps.so'         [ Not found ]
[23:32:34]   Checking for file '/usr/lib/ldlibnet.so'        [ Not found ]
[23:32:34]   Checking for file '/dev/pts/01/uconf.inv'       [ Not found ]
[23:32:34]   Checking for file '/dev/pts/01/cleaner'         [ Not found ]
[23:32:34]   Checking for file '/dev/pts/01/bin/psniff'      [ Not found ]
[23:32:34]   Checking for file '/dev/pts/01/bin/du'          [ Not found ]
[23:32:34]   Checking for file '/dev/pts/01/bin/ls'          [ Not found ]
[23:32:34]   Checking for file '/dev/pts/01/bin/passwd'      [ Not found ]
[23:32:34]   Checking for file '/dev/pts/01/bin/ps'          [ Not found ]
[23:32:34]   Checking for file '/dev/pts/01/bin/psr'         [ Not found ]
[23:32:34]   Checking for file '/dev/pts/01/bin/su'          [ Not found ]
[23:32:34]   Checking for file '/dev/pts/01/bin/find'        [ Not found ]
[23:32:34]   Checking for file '/dev/pts/01/bin/netstat'     [ Not found ]
[23:32:34]   Checking for file '/dev/pts/01/bin/ping'        [ Not found ]
[23:32:34]   Checking for file '/dev/pts/01/bin/strings'     [ Not found ]
[23:32:34]   Checking for file '/dev/pts/01/bin/bash'        [ Not found ]
[23:32:34]   Checking for file '/usr/man/man1/xxxxxxbin/du'  [ Not found ]
[23:32:34]   Checking for file '/usr/man/man1/xxxxxxbin/ls'  [ Not found ]
[23:32:34]   Checking for file '/usr/man/man1/xxxxxxbin/passwd' [ Not found ]
[23:32:34]   Checking for file '/usr/man/man1/xxxxxxbin/ps'  [ Not found ]
[23:32:34]   Checking for file '/usr/man/man1/xxxxxxbin/psr' [ Not found ]
[23:32:34]   Checking for file '/usr/man/man1/xxxxxxbin/su'  [ Not found ]
[23:32:34]   Checking for file '/usr/man/man1/xxxxxxbin/find' [ Not found ]
[23:32:35]   Checking for file '/usr/man/man1/xxxxxxbin/netstat' [ Not found ]
[23:32:35]   Checking for file '/usr/man/man1/xxxxxxbin/ping' [ Not found ]
[23:32:35]   Checking for file '/usr/man/man1/xxxxxxbin/strings' [ Not found ]
[23:32:35]   Checking for file '/usr/man/man1/xxxxxxbin/bash' [ Not found ]
[23:32:35]   Checking for file '/tmp/conf.inv'               [ Not found ]
[23:32:35]   Checking for directory '/dev/prom'              [ Not found ]
[23:32:35]   Checking for directory '/dev/pts/01'            [ Not found ]
[23:32:35]   Checking for directory '/dev/pts/01/bin'        [ Not found ]
[23:32:35]   Checking for directory '/usr/man/man1/xxxxxxbin' [ Not found ]
[23:32:35] URK Rootkit                                       [ Not found ]
[23:32:35]
[23:32:35] Checking for Vampire Rootkit...
[23:32:35]   Checking for kernel symbol 'new_getdents'       [ Not found ]
[23:32:35]   Checking for kernel symbol 'old_getdents'       [ Not found ]
[23:32:35]   Checking for kernel symbol 'should_hide_file_name' [ Not found ]
[23:32:35]   Checking for kernel symbol 'should_hide_task_name' [ Not found ]
[23:32:35] Vampire Rootkit                                   [ Not found ]
[23:32:36]
[23:32:36] Checking for VcKit Rootkit...
[23:32:36]   Checking for directory '/usr/include/linux/modules/lib.so' [ Not found ]
[23:32:36]   Checking for directory '/usr/include/linux/modules/lib.so/bin' [ Not found ]
[23:32:36] VcKit Rootkit                                     [ Not found ]
[23:32:36]
[23:32:36] Checking for Volc Rootkit...
[23:32:36]   Checking for file '/usr/bin/volc'               [ Not found ]
[23:32:36]   Checking for file '/usr/lib/volc/backdoor/divine' [ Not found ]
[23:32:36]   Checking for file '/usr/lib/volc/linsniff'      [ Not found ]
[23:32:36]   Checking for file '/etc/rc.d/rc1.d/S25sysconf'  [ Not found ]
[23:32:36]   Checking for file '/etc/rc.d/rc2.d/S25sysconf'  [ Not found ]
[23:32:36]   Checking for file '/etc/rc.d/rc3.d/S25sysconf'  [ Not found ]
[23:32:36]   Checking for file '/etc/rc.d/rc4.d/S25sysconf'  [ Not found ]
[23:32:36]   Checking for file '/etc/rc.d/rc5.d/S25sysconf'  [ Not found ]
[23:32:36]   Checking for directory '/var/spool/.recent'     [ Not found ]
[23:32:36]   Checking for directory '/var/spool/.recent/.files' [ Not found ]
[23:32:37]   Checking for directory '/usr/lib/volc'          [ Not found ]
[23:32:37]   Checking for directory '/usr/lib/volc/backup'   [ Not found ]
[23:32:37] Volc Rootkit                                      [ Not found ]
[23:32:37]
[23:32:37] Checking for Xzibit Rootkit...
[23:32:37]   Checking for file '/dev/dsx'                    [ Not found ]
[23:32:37]   Checking for file '/dev/caca'                   [ Not found ]
[23:32:37]   Checking for file '/dev/ida/.inet/linsniffer'   [ Not found ]
[23:32:37]   Checking for file '/dev/ida/.inet/logclear'     [ Not found ]
[23:32:37]   Checking for file '/dev/ida/.inet/sense'        [ Not found ]
[23:32:37]   Checking for file '/dev/ida/.inet/sl2'          [ Not found ]
[23:32:37]   Checking for file '/dev/ida/.inet/sshdu'        [ Not found ]
[23:32:37]   Checking for file '/dev/ida/.inet/s'            [ Not found ]
[23:32:37]   Checking for file '/dev/ida/.inet/ssh_host_key' [ Not found ]
[23:32:37]   Checking for file '/dev/ida/.inet/ssh_random_seed' [ Not found ]
[23:32:37]   Checking for file '/dev/ida/.inet/sl2new.c'     [ Not found ]
[23:32:37]   Checking for file '/dev/ida/.inet/tcp.log'      [ Not found ]
[23:32:37]   Checking for file '/home/httpd/cgi-bin/becys.cgi' [ Not found ]
[23:32:37]   Checking for file '/usr/local/httpd/cgi-bin/becys.cgi' [ Not found ]
[23:32:37]   Checking for file '/usr/local/apache/cgi-bin/becys.cgi' [ Not found ]
[23:32:37]   Checking for file '/www/httpd/cgi-bin/becys.cgi' [ Not found ]
[23:32:37]   Checking for file '/www/cgi-bin/becys.cgi'      [ Not found ]
[23:32:37]   Checking for directory '/dev/ida/.inet'         [ Not found ]
[23:32:38] Xzibit Rootkit                                    [ Not found ]
[23:32:38]
[23:32:38] Checking for zaRwT.KiT Rootkit...
[23:32:38]   Checking for file '/dev/rd/s/sendmeil'          [ Not found ]
[23:32:38]   Checking for file '/dev/ttyf'                   [ Not found ]
[23:32:38]   Checking for file '/dev/ttyp'                   [ Not found ]
[23:32:38]   Checking for file '/dev/ttyn'                   [ Not found ]
[23:32:38]   Checking for file '/rk/tulz'                    [ Not found ]
[23:32:38]   Checking for directory '/rk'                    [ Not found ]
[23:32:38]   Checking for directory '/dev/rd/s'              [ Not found ]
[23:32:38] zaRwT.KiT Rootkit                                 [ Not found ]
[23:32:38]
[23:32:38] Checking for ZK Rootkit...
[23:32:38]   Checking for file '/usr/share/.zk/zk'           [ Not found ]
[23:32:38]   Checking for file '/usr/X11R6/.zk/xfs'          [ Not found ]
[23:32:38]   Checking for file '/usr/X11R6/.zk/echo'         [ Not found ]
[23:32:38]   Checking for file '/etc/1ssue.net'              [ Not found ]
[23:32:38]   Checking for file '/etc/sysconfig/console/load.zk' [ Not found ]
[23:32:38]   Checking for directory '/usr/share/.zk'         [ Not found ]
[23:32:38]   Checking for directory '/usr/X11R6/.zk'         [ Not found ]
[23:32:38] ZK Rootkit                                        [ Not found ]
[23:33:14]
[23:33:14] Info: Starting test name 'additional_rkts'
[23:33:14] Performing additional rootkit checks
[23:33:14]
[23:33:14]   Performing Suckit Rootkit additional checks
[23:33:14]     Checking hard link count on '/sbin/init'      [ OK ]
[23:33:14]     Checking for hidden file extensions           [ None found ]
[23:33:14]     Running skdet command                         [ Skipped ]
[23:33:14] Info: Unable to find the 'skdet' command
[23:33:14]   Suckit Rootkit additional checks                [ OK ]
[23:33:14]
[23:33:14] Info: Starting test name 'possible_rkt_files'
[23:33:15]   Performing check of possible rootkit files and directories
[23:33:15]     Checking for file '/dev/sdr0'                 [ Not found ]
[23:33:15]     Checking for file '/dev/pisu'                 [ Not found ]
[23:33:15]     Checking for file '/dev/xdta'                 [ Not found ]
[23:33:15]     Checking for file '/dev/saux'                 [ Not found ]
[23:33:15]     Checking for file '/dev/hdx'                  [ Not found ]
[23:33:15]     Checking for file '/dev/hdx1'                 [ Not found ]
[23:33:15]     Checking for file '/dev/hdx2'                 [ Not found ]
[23:33:15]     Checking for file '/dev/ptyy'                 [ Not found ]
[23:33:15]     Checking for file '/dev/ptyu'                 [ Not found ]
[23:33:15]     Checking for file '/dev/ptyv'                 [ Not found ]
[23:33:15]     Checking for file '/dev/hdbb'                 [ Not found ]
[23:33:15]     Checking for file '/tmp/.syshackfile'         [ Not found ]
[23:33:15]     Checking for file '/tmp/.bash_history'        [ Not found ]
[23:33:15]     Checking for file '/usr/info/.clib'           [ Not found ]
[23:33:15]     Checking for file '/usr/sbin/tcp.log'         [ Not found ]
[23:33:16]     Checking for file '/usr/bin/take/pid'         [ Not found ]
[23:33:16]     Checking for file '/sbin/create'              [ Not found ]
[23:33:16]     Checking for file '/dev/ttypz'                [ Not found ]
[23:33:16]     Checking for file '/var/log/tcp.log'          [ Not found ]
[23:33:16]     Checking for file '/usr/include/audit.h'      [ Not found ]
[23:33:16]     Checking for file '/usr/bin/sourcemask'       [ Not found ]
[23:33:16]     Checking for file '/usr/bin/ras2xm'           [ Not found ]
[23:33:16]     Checking for file '/dev/xmx'                  [ Not found ]
[23:33:16]     Checking for file '/usr/sbin/gpm.root'        [ Not found ]
[23:33:16]     Checking for file '/bin/vobiscum'             [ Not found ]
[23:33:16]     Checking for file '/bin/psr'                  [ Not found ]
[23:33:16]     Checking for file '/dev/kdx'                  [ Not found ]
[23:33:16]     Checking for file '/dev/dkx'                  [ Not found ]
[23:33:16]     Checking for file '/usr/sbin/sshd3'           [ Not found ]
[23:33:16]     Checking for file '/usr/sbin/jcd'             [ Not found ]
[23:33:16]     Checking for file '/usr/sbin/atd2'            [ Not found ]
[23:33:16]     Checking for file '/home/httpd/cgi-bin/linux.cgi' [ Not found ]
[23:33:16]     Checking for file '/home/httpd/cgi-bin/psid'  [ Not found ]
[23:33:17]     Checking for file '/home/httpd/cgi-bin/void.cgi' [ Not found ]
[23:33:17]     Checking for file '/etc/rc.d/init.d/system'   [ Not found ]
[23:33:17]     Checking for file '/etc/rc.d/rc3.d/S93users'  [ Not found ]
[23:33:17]     Checking for file '/tmp/.ush'                 [ Not found ]
[23:33:17]     Checking for file '/usr/lib/libhidefile.so'   [ Not found ]
[23:33:17]     Checking for file '/etc/cron.d/kmod'          [ Not found ]
[23:33:17]     Checking for file '/usr/lib/dmis/dmisd'       [ Not found ]
[23:33:17]     Checking for file '/lib/secure/libhij.so'     [ Not found ]
[23:33:17]     Checking for file '/usr/sbin/sshd3'           [ Not found ]
[23:33:17]     Checking for file '/etc/rc.d/init.d/crontab'  [ Not found ]
[23:33:17]     Checking for file '/etc/rc.d/init.d/jcd'      [ Not found ]
[23:33:17]     Checking for file '/usr/sbin/atd2'            [ Not found ]
[23:33:17]     Checking for file '/etc/rc.d/rc5.d/S93users'  [ Not found ]
[23:33:17]     Checking for file '/usr/include/mysql/mysql.hh1' [ Not found ]
[23:33:17]     Checking for file '/etc/init.d/xfs3'          [ Not found ]
[23:33:17]     Checking for file '/usr/sbin/t.txt'           [ Not found ]
[23:33:17]     Checking for file '/usr/sbin/change'          [ Not found ]
[23:33:17]     Checking for file '/usr/sbin/s'               [ Not found ]
[23:33:17]     Checking for file '/bin/f'                    [ Not found ]
[23:33:18]     Checking for file '/bin/i'                    [ Not found ]
[23:33:18]     Checking for file '/lib/libncom.so.4.0.1'     [ Not found ]
[23:33:18]     Checking for file '/sbin/zinit'               [ Not found ]
[23:33:18]     Checking for file '/tmp/pass_ssh.log'         [ Not found ]
[23:33:18]     Checking for file '/usr/include/gpm2.h'       [ Not found ]
[23:33:18]     Checking for file '/etc/ssh/.sshd_auth'       [ Not found ]
[23:33:18]     Checking for file '/usr/lib/.sshd.h'          [ Not found ]
[23:33:18]     Checking for file '/var/run/.defunct'         [ Not found ]
[23:33:18]     Checking for file '/etc/httpd/run/.defunct'   [ Not found ]
[23:33:18]     Checking for file '/usr/share/pci.r'          [ Not found ]
[23:33:18]     Checking for file '/etc/cron.daily/dnsquery'  [ Not found ]
[23:33:18]     Checking for file '/usr/lib/libutil1.2.1.2.so' [ Not found ]
[23:33:18]     Checking for file '/usr/lib/libppopen.so'     [ Not found ]
[23:33:18]     Checking for file '/usr/include/libutil2.1.h' [ Not found ]
[23:33:18]     Checking for file '/usr/bin/munchhausen'      [ Not found ]
[23:33:18]     Checking for file '/bin/ceva'                 [ Not found ]
[23:33:18]     Checking for file '/sbin/syslogd<SP>'         [ Not found ]
[23:33:19]     Checking for file '/usr/include/shup.h'       [ Not found ]
[23:33:19]     Checking for file '/etc/rpm/sshdOLD'          [ Not found ]
[23:33:19]     Checking for file '/etc/rpm/sshOLD'           [ Not found ]
[23:33:19]     Checking for file '/usr/share/passwd.h'       [ Not found ]
[23:33:19]     Checking for file '/lib/.xsyslog'             [ Not found ]
[23:33:19]     Checking for file '/etc/.xsyslog'             [ Not found ]
[23:33:19]     Checking for file '/lib/.ssyslog'             [ Not found ]
[23:33:19]     Checking for file '/tmp/.sendmail'            [ Not found ]
[23:33:19]     Checking for file '/usr/share/sshd.sync'      [ Not found ]
[23:33:19]     Checking for file '/bin/zcut'                 [ Not found ]
[23:33:19]     Checking for file '/usr/bin/zmuie'            [ Not found ]
[23:33:19]     Checking for file '/lib/libkeyutils.so.1.9'   [ Not found ]
[23:33:19]     Checking for file '/lib64/libkeyutils.so.1.9' [ Not found ]
[23:33:19]     Checking for file '/usr/lib/libkeyutils.so.1.9' [ Not found ]
[23:33:19]     Checking for file '/usr/lib64/libkeyutils.so.1.9' [ Not found ]
[23:33:19]     Checking for file '/IptabLes'                 [ Not found ]
[23:33:19]     Checking for file '/.IptabLex'                [ Not found ]
[23:33:19]     Checking for file '/boot/.IptabLex'           [ Not found ]
[23:33:19]     Checking for file '/boot/.IptabLes'           [ Not found ]
[23:33:19]     Checking for file '/boot/IptabLes'            [ Not found ]
[23:33:20]     Checking for file '/tmp/IptabLes'             [ Not found ]
[23:33:20]     Checking for file '/etc/rc.d/init.d/IptabLex' [ Not found ]
[23:33:20]     Checking for file '/etc/rc.d/init.d/IptabLes' [ Not found ]
[23:33:20]     Checking for file '/etc/rc.d/rc0.d/S55IptabLex' [ Not found ]
[23:33:20]     Checking for file '/etc/rc.d/rc1.d/S55IptabLex' [ Not found ]
[23:33:20]     Checking for file '/etc/rc.d/rc2.d/S55IptabLex' [ Not found ]
[23:33:20]     Checking for file '/etc/rc.d/rc3.d/S55IptabLex' [ Not found ]
[23:33:20]     Checking for file '/etc/rc.d/rc4.d/S55IptabLex' [ Not found ]
[23:33:20]     Checking for file '/etc/rc.d/rc5.d/S55IptabLex' [ Not found ]
[23:33:20]     Checking for file '/etc/rc.d/rc6.d/S55IptabLex' [ Not found ]
[23:33:20]     Checking for file '/var/lib/update-rc.d/IptabLex' [ Not found ]
[23:33:20]     Checking for file '/delallmykkk'              [ Not found ]
[23:33:20]     Checking for file '/usr/.IptabLes'            [ Not found ]
[23:33:20]     Checking for file '/usr/IptabLes'             [ Not found ]
[23:33:20]     Checking for file '/tmp/.flush'               [ Not found ]
[23:33:20]     Checking for file '/var/log/.flush'           [ Not found ]
[23:33:20]     Checking for file '/usr/.flush'               [ Not found ]
[23:33:20]     Checking for file '/etc/init.d/bluetoothdaemon' [ Not found ]
[23:33:20]     Checking for file '/usr/bin/btdaemon'         [ Not found ]
[23:33:20]     Checking for file '/etc/rc1.d/S90bluetooth'   [ Not found ]
[23:33:20]     Checking for file '/etc/rc2.d/S90bluetooth'   [ Not found ]
[23:33:21]     Checking for file '/etc/rc3.d/S90bluetooth'   [ Not found ]
[23:33:21]     Checking for file '/etc/rc4.d/S90bluetooth'   [ Not found ]
[23:33:21]     Checking for file '/etc/rc5.d/S90bluetooth'   [ Not found ]
[23:33:21]     Checking for file '/etc/rc6.d/S90bluetooth'   [ Not found ]
[23:33:21]     Checking for file '/boot/pro'                 [ Not found ]
[23:33:21]     Checking for file '/boot/proh'                [ Not found ]
[23:33:21]     Checking for file '/etc/atdd'                 [ Not found ]
[23:33:21]     Checking for file '/etc/atddd'                [ Not found ]
[23:33:21]     Checking for file '/etc/cupsdd'               [ Not found ]
[23:33:21]     Checking for file '/etc/cupsddd'              [ Not found ]
[23:33:21]     Checking for file '/etc/cupsddh'              [ Not found ]
[23:33:21]     Checking for file '/etc/dsfrefr'              [ Not found ]
[23:33:21]     Checking for file '/etc/fdsfsfvff'            [ Not found ]
[23:33:21]     Checking for file '/etc/ferwfrre'             [ Not found ]
[23:33:21]     Checking for file '/etc/fwke.cfg'             [ Not found ]
[23:33:21]     Checking for file '/etc/gdmorpen'             [ Not found ]
[23:33:21]     Checking for file '/etc/gfhddsfew'            [ Not found ]
[23:33:21]     Checking for file '/etc/gfhjrtfyhuf'          [ Not found ]
[23:33:21]     Checking for file '/etc/ksapd'                [ Not found ]
[23:33:21]     Checking for file '/etc/ksapdd'               [ Not found ]
[23:33:21]     Checking for file '/etc/kysapd'               [ Not found ]
[23:33:22]     Checking for file '/etc/kysapdd'              [ Not found ]
[23:33:22]     Checking for file '/etc/rewgtf3er4t'          [ Not found ]
[23:33:22]     Checking for file '/etc/sdmfdsfhjfe'          [ Not found ]
[23:33:22]     Checking for file '/etc/sfewfesfs'            [ Not found ]
[23:33:22]     Checking for file '/etc/sfewfesfsh'           [ Not found ]
[23:33:22]     Checking for file '/etc/sksapd'               [ Not found ]
[23:33:22]     Checking for file '/etc/sksapdd'              [ Not found ]
[23:33:22]     Checking for file '/etc/skysapd'              [ Not found ]
[23:33:22]     Checking for file '/etc/skysapdd'             [ Not found ]
[23:33:22]     Checking for file '/etc/smarvtd'              [ Not found ]
[23:33:22]     Checking for file '/etc/whitptabil'           [ Not found ]
[23:33:22]     Checking for file '/etc/xfsdx'                [ Not found ]
[23:33:22]     Checking for file '/etc/xfsdxd'               [ Not found ]
[23:33:22]     Checking for file '/tmp/bill.lock'            [ Not found ]
[23:33:22]     Checking for file '/tmp/gates.lock'           [ Not found ]
[23:33:22]     Checking for file '/tmp/gates.lod'            [ Not found ]
[23:33:22]     Checking for file '/tmp/moni.lock'            [ Not found ]
[23:33:22]     Checking for file '/tmp/moni.lod'             [ Not found ]
[23:33:22]     Checking for file '/tmp/notify.file'          [ Not found ]
[23:33:22]     Checking for file '/usr/bin/.sshd'            [ Not found ]
[23:33:22]     Checking for file '/usr/bin/bsd-port/getty'   [ Not found ]
[23:33:23]     Checking for file '/usr/bin/bsd-port/getty.lock' [ Not found ]
[23:33:23]     Checking for file '/usr/bin/bsd-port/udevd.lock' [ Not found ]
[23:33:23]     Checking for file '/usr/bin/pojie'            [ Not found ]
[23:33:23]     Checking for file '/usr/lib/libamplify.so'    [ Not found ]
[23:33:23]     Checking for file '/etc/init.d/DbSecuritySpt' [ Not found ]
[23:33:23]     Checking for file '/etc/rc.d/init.d/DbSecuritySpt' [ Not found ]
[23:33:23]     Checking for file '/etc/cron.hourly/gcc.sh'   [ Not found ]
[23:33:23]     Checking for file '/root/2016ttfacai'         [ Not found ]
[23:33:23]     Checking for file '/proc/rs_dev'              [ Not found ]
[23:33:23]     Checking for file '/var/run/sftp.pid'         [ Not found ]
[23:33:23]     Checking for file '/var/run/udev.pid'         [ Not found ]
[23:33:23]     Checking for file '/var/run/mount.pid'        [ Not found ]
[23:33:23]     Checking for file '/etc/cron.hourly/cron.sh'  [ Not found ]
[23:33:23]     Checking for file '/etc/cron.hourly/udev.sh'  [ Not found ]
[23:33:23]     Checking for file '/etc/cron.hourly/udev.sh'  [ Not found ]
[23:33:23]     Checking for file '/lib/libgcc.so'            [ Not found ]
[23:33:23]     Checking for file '/lib/libgcc.so.bak'        [ Not found ]
[23:33:23]     Checking for file '/lib/libgcc4.so'           [ Not found ]
[23:33:23]     Checking for file '/lib/libgcc4.4.so'         [ Not found ]
[23:33:23]     Checking for file '/lib/udev/udev'            [ Not found ]
[23:33:24]     Checking for file '/lib/udev/debug'           [ Not found ]
[23:33:24]     Checking for directory '/dev/ptyas'           [ Not found ]
[23:33:24]     Checking for directory '/usr/bin/take'        [ Not found ]
[23:33:24]     Checking for directory '/usr/src/.lib'        [ Not found ]
[23:33:24]     Checking for directory '/usr/share/man/man1/.1c' [ Not found ]
[23:33:24]     Checking for directory '/lib/lblip.tk'        [ Not found ]
[23:33:24]     Checking for directory '/usr/sbin/...'        [ Not found ]
[23:33:24]     Checking for directory '/usr/share/.gun'      [ Not found ]
[23:33:24]     Checking for directory '/unde/vrei/tu/sa/te/ascunzi/in/server' [ Not found ]
[23:33:24]     Checking for directory '/usr/man/man1/..<SP><SP>/.dir' [ Not found ]
[23:33:24]     Checking for directory '/usr/X11R6/include/X11/...' [ Not found ]
[23:33:24]     Checking for directory '/usr/X11R6/lib/X11/.fonts/misc/...' [ Not found ]
[23:33:24]     Checking for directory '/tmp/.sys'            [ Not found ]
[23:33:24]     Checking for directory '/tmp/''               [ Not found ]
[23:33:24]     Checking for directory '/tmp/.,'              [ Not found ]
[23:33:24]     Checking for directory '/tmp/,.,'             [ Not found ]
[23:33:24]     Checking for directory '/dev/shm/emilien'     [ Not found ]
[23:33:24]     Checking for directory '/var/tmp/.log'        [ Not found ]
[23:33:24]     Checking for directory '/tmp/zmeu/...<SP>'    [ Not found ]
[23:33:25]     Checking for directory '/var/log/ssh'         [ Not found ]
[23:33:25]     Checking for directory '/dev/ida'             [ Not found ]
[23:33:25]     Checking for directory '/var/lib/games/.src/ssk/shit' [ Not found ]
[23:33:25]     Checking for directory '/usr/lib/libshtift'   [ Not found ]
[23:33:25]     Checking for directory '/usr/src/.poop'       [ Not found ]
[23:33:25]     Checking for directory '/dev/wd4'             [ Not found ]
[23:33:25]     Checking for directory '/var/run/.tmp'        [ Not found ]
[23:33:25]     Checking for directory '/usr/man/man1/lib/.lib' [ Not found ]
[23:33:25]     Checking for directory '/dev/portd'           [ Not found ]
[23:33:25]     Checking for directory '/dev/...'             [ Not found ]
[23:33:25]     Checking for directory '/usr/share/man/mansps' [ Not found ]
[23:33:25]     Checking for directory '/lib/.so'             [ Not found ]
[23:33:25]     Checking for directory '/lib/.sso'            [ Not found ]
[23:33:25]     Checking for directory '/usr/include/sslv3'   [ Not found ]
[23:33:25]     Checking for directory '/dev/shm/sshd'        [ Not found ]
[23:33:25]     Checking for directory '/usr/share/locale/mk/.dev/sk' [ Not found ]
[23:33:25]     Checking for directory '/usr/share/locale/mk/.dev' [ Not found ]
[23:33:25]     Checking for directory '/usr/include/netda.h' [ Not found ]
[23:33:25]     Checking for directory '/usr/include/.ssh'    [ Not found ]
[23:33:25]     Checking for directory '/usr/share/locale/jp/.<SP>' [ Not found ]
[23:33:26]     Checking for directory '/usr/share/.sqe'      [ Not found ]
[23:33:26]   Checking for possible rootkit files and directories [ None found ]
[23:33:26]
[23:33:26] Info: Starting test name 'possible_rkt_strings'
[23:33:26]   Performing check for possible rootkit strings
[23:33:26] Info: Using system startup paths: /etc/rc.d /etc/inittab /etc/systemd/system
[23:33:26]     Checking for string 'LOGNAME=root'            [ Not found ]
[23:33:26]     Checking for string 'phalanx'                 [ Not found ]
[23:33:26]     Checking for string '/dev/proc/fuckit'        [ Not found ]
[23:33:26]     Checking for string 'FUCK'                    [ Not found ]
[23:33:26]     Checking for string 'backdoor'                [ Not found ]
[23:33:26]     Checking for string '/usr/bin/rcpc'           [ Not found ]
[23:33:26]     Checking for string '/usr/sbin/login'         [ Not found ]
[23:33:26]     Checking for string '/dev/ptyxx/.proc'        [ Not found ]
[23:33:26]     Checking for string 'vt200'                   [ Not found ]
[23:33:26]     Checking for string '/usr/bin/xstat'          [ Not found ]
[23:33:26]     Checking for string '/bin/envpc'              [ Not found ]
[23:33:26]     Checking for string 'L4m3r0x'                 [ Not found ]
[23:33:26]     Checking for string '/lib/libext'             [ Not found ]
[23:33:27]     Checking for string '/usr/sbin/login'         [ Not found ]
[23:33:27]     Checking for string '/usr/lib/.tbd'           [ Not found ]
[23:33:27]     Checking for string 'sendmail'                [ Not found ]
[23:33:27]     Checking for string 'cocacola'                [ Not found ]
[23:33:27]     Checking for string 'joao'                    [ Not found ]
[23:33:27]     Checking for string '/dev/ptyxx/.file'        [ Not found ]
[23:33:27]     Checking for string '/dev/ptyxx/.file'        [ Not found ]
[23:33:27]     Checking for string '/dev/sgk'                [ Not found ]
[23:33:27]     Checking for string '/var/lock/subsys/...datafile...' [ Not found ]
[23:33:27]     Checking for string '/usr/lib/.tbd'           [ Not found ]
[23:33:27]     Checking for string '/dev/proc/fuckit'        [ Not found ]
[23:33:27]     Checking for string '/lib/.sso'               [ Not found ]
[23:33:27]     Checking for string '/var/lock/subsys/...datafile...' [ Not found ]
[23:33:27]     Checking for string '/dev/caca'               [ Not found ]
[23:33:27]     Checking for string '/dev/ttyoa'              [ Not found ]
[23:33:27]     Checking for string '/usr/lib/ldlibns.so'     [ Not found ]
[23:33:27]     Checking for string '/dev/ptyxx/.addr'        [ Not found ]
[23:33:27]     Checking for string 'syg'                     [ Not found ]
[23:33:28]     Checking for string '/var/lock/subsys/...datafile...' [ Not found ]
[23:33:28]     Checking for string '/dev/pts/01'             [ Not found ]
[23:33:28]     Checking for string 'tw33dl3'                 [ Not found ]
[23:33:28]     Checking for string 'psniff'                  [ Not found ]
[23:33:28]     Checking for string 'uconf.inv'               [ Not found ]
[23:33:28]     Checking for string 'lib/ldlibps.so'          [ Not found ]
[23:33:28]     Checking for string '/usr/lib/ldlibpst.so'    [ Not found ]
[23:33:28]     Checking for string 'libproc.so.2.0.7'        [ Not found ]
[23:33:28]     Checking for string '/dev/ptyxx/.proc'        [ Not found ]
[23:33:28]     Checking for string '/dev/ptyxx/.proc'        [ Not found ]
[23:33:28]     Checking for string 'libproc.so.2.0.7'        [ Not found ]
[23:33:28]     Checking for string 'libproc.so.2.0.7'        [ Not found ]
[23:33:28]     Checking for string '/bin/bash'               [ Not found ]
[23:33:28]     Checking for string 'cant open log'           [ Not found ]
[23:33:28]     Checking for string 'sniff.pid'               [ Not found ]
[23:33:28]     Checking for string 'tcp.log'                 [ Not found ]
[23:33:28]     Checking for string '/dev/ptyxx'              [ Not found ]
[23:33:29]     Checking for string '/.config'                [ Not found ]
[23:33:29]     Checking for string '\$.*\$\!.*\!\!\$'        [ Not found ]
[23:33:29]     Checking for string 'backdoor.h'              [ Not found ]
[23:33:29]     Checking for string 'backdoor_active'         [ Not found ]
[23:33:29]     Checking for string 'magic_pass_active'       [ Not found ]
[23:33:29]     Checking for string '/usr/include/gpm2.h'     [ Not found ]
[23:33:29]     Checking for string '/usr/include/openssl'    [ Not found ]
[23:33:29]     Checking for string 'aion'                    [ Not found ]
[23:33:29]     Checking for string 'pcszPass'                [ Not found ]
[23:33:29]     Checking for string 'LogPass'                 [ Not found ]
[23:33:29]     Checking for string 'Login_Check'             [ Not found ]
[23:33:29]     Checking for string 'includes.h'              [ Not found ]
[23:33:29]     Checking for string 'DecodeString'            [ Not found ]
[23:33:29]     Checking for string 'EncodeString'            [ Not found ]
[23:33:29]     Checking for string 'libns2.so'               [ Not found ]
[23:33:29]     Checking for string 'libns5.so'               [ Not found ]
[23:33:29]     Checking for string 'libpw3.so'               [ Not found ]
[23:33:30]     Checking for string 'libpw5.so'               [ Not found ]
[23:33:30]     Checking for string 'libsbr.so'               [ Not found ]
[23:33:30]     Checking for string 'libslr.so'               [ Not found ]
[23:33:30]     Checking for string '/usr/lib/.tbd'           [ Not found ]
[23:33:30]     Checking for string '/dev/ptyxx/.proc'        [ Not found ]
[23:33:30]     Checking for string 'in.inetd'                [ Not found ]
[23:33:31]     Checking for string '#<HIDE_.*>'              [ Not found ]
[23:33:31]     Checking for string 'bin/xchk'                [ Not found ]
[23:33:31]     Checking for string 'bin/xsf'                 [ Not found ]
[23:33:32]     Checking for string '/usr/bin/ssh2d'          [ Not found ]
[23:33:32]     Checking for string '/usr/sbin/xntps'         [ Not found ]
[23:33:32]     Checking for string 'ttyload'                 [ Not found ]
[23:33:32]     Checking for string '/etc/rc.d/init.d/init'   [ Not found ]
[23:33:33]     Checking for string 'usr/bin/xfss'            [ Not found ]
[23:33:33]     Checking for string '/usr/sbin/rpc.netinet'   [ Not found ]
[23:33:34]     Checking for string '/usr/lib/.fx/cons.saver' [ Not found ]
[23:33:34]     Checking for string '/usr/lib/.fx/xs'         [ Not found ]
[23:33:34]     Checking for string '/ssh2d'                  [ Not found ]
[23:33:35]     Checking for string '/dev/kmod'               [ Not found ]
[23:33:35]     Checking for string '/crth.o'                 [ Not found ]
[23:33:35]     Checking for string '/crtz.o'                 [ Not found ]
[23:33:35]     Checking for string '/dev/dos'                [ Not found ]
[23:33:36]     Checking for string '/lpq'                    [ Not found ]
[23:33:36]     Checking for string '/usr/sbin/rescue'        [ Not found ]
[23:33:36]     Checking for string '/usr/lib/lpstart'        [ Not found ]
[23:33:36]     Checking for string '/volc'                   [ Not found ]
[23:33:37]     Checking for string 'sourcemask'              [ Not found ]
[23:33:37]     Checking for string '/bin/vobiscum'           [ Not found ]
[23:33:37]     Checking for string '/usr/sbin/in.telnet'     [ Not found ]
[23:33:38]     Checking for string '/usr/bin/hdparm?-t1?-X53?-p' [ Not found ]
[23:33:38]     Checking for string '/lib/.xsyslog'           [ Not found ]
[23:33:38]     Checking for string '/etc/.xsyslog'           [ Not found ]
[23:33:38]     Checking for string '/lib/.ssyslog'           [ Not found ]
[23:33:39]     Checking for string '/tmp/.sendmail'          [ Not found ]
[23:33:39]     Checking for string 'IptabLex'                [ Not found ]
[23:33:39]     Checking for string 'IptabLes'                [ Not found ]
[23:33:39]     Checking for string '/lib/ldd.so/tkps'        [ Not found ]
[23:33:39]     Checking for string 't0rnkit'                 [ Not found ]
[23:33:39]     Checking for string '/dev/proc/fuckit'        [ Not found ]
[23:33:39]     Checking for string 'backdoor.h'              [ Not found ]
[23:33:39]     Checking for string 'backdoor_active'         [ Not found ]
[23:33:40]     Checking for string 'magic_pass_active'       [ Not found ]
[23:33:40]     Checking for string '/usr/include/gpm2.h'     [ Not found ]
[23:33:40]     Checking for string 'libproc.so.2.0.7'        [ Not found ]
[23:33:40]     Checking for string 'libproc.so.2.0.7'        [ Not found ]
[23:33:40]     Checking for string 'libproc.so.2.0.7'        [ Not found ]
[23:33:40]     Checking for string '/usr/lib/ldlibct.so'     [ Not found ]
[23:33:40]     Checking for string '/usr/lib/ldlibdu.so'     [ Not found ]
[23:33:40]     Checking for string '/dev/ptyxx/.file'        [ Not found ]
[23:33:40]     Checking for string 'libproc.so.2.0.7'        [ Not found ]
[23:33:40]     Checking for string '/usr/include/mysql/mysql.hh1' [ Not found ]
[23:33:40]     Checking for string '/usr/include/mysql/mysql.hh1' [ Not found ]
[23:33:40]     Checking for string '/usr/include/mysql/mysql.hh1' [ Not found ]
[23:33:40]     Checking for string '/usr/include/mysql/mysql.hh1' [ Not found ]
[23:33:40]     Checking for string '/usr/include/mysql/mysql.hh1' [ Not found ]
[23:33:40]     Checking for string '/usr/include/mysql/mysql.hh1' [ Not found ]
[23:33:40]     Checking for string 'backconnect'             [ Not found ]
[23:33:40]     Checking for string 'magic?packet?received'   [ Not found ]
[23:33:40]   Checking for possible rootkit strings           [ None found ]
[23:33:41]
[23:33:41] Info: Starting test name 'malware'
[23:33:41] Performing malware checks
[23:33:41]
[23:33:41] Info: Test 'deleted_files' disabled at users request.
[23:33:41]
[23:33:41] Info: Starting test name 'running_procs'
[23:33:47]   Checking running processes for suspicious files [ None found ]
[23:33:47]
[23:33:47] Info: Starting test name 'hidden_procs'
[23:33:47] Info: Unable to find the 'unhide' command
[23:33:47] Info: Unable to find the 'unhide-linux' command
[23:33:47]   Checking for hidden processes                   [ Skipped ]
[23:33:47]
[23:33:47] Info: Test 'suspscan' disabled at users request.
[23:33:47]
[23:33:47] Info: Starting test name 'login_backdoors'
[23:33:47]     Checking for '/bin/.login'                    [ Not found ]
[23:33:47]     Checking for '/sbin/.login'                   [ Not found ]
[23:33:47]   Checking for login backdoors                    [ None found ]
[23:33:47]
[23:33:47] Info: Starting test name 'sniffer_logs'
[23:33:47]     Checking for file '/usr/lib/libice.log'       [ Not found ]
[23:33:47]     Checking for file '/dev/prom/sn.l'            [ Not found ]
[23:33:47]     Checking for file '/dev/fd/.88/zxsniff.log'   [ Not found ]
[23:33:47]   Checking for sniffer log files                  [ None found ]
[23:33:47]
[23:33:47] Info: Starting test name 'tripwire'
[23:33:47]   Checking for software intrusions                [ Skipped ]
[23:33:47] Info: Check skipped - tripwire not installed
[23:33:47]
[23:33:47] Info: Starting test name 'susp_dirs'
[23:33:47]     Checking for directory '/usr/X11R6/bin/.,/copy' [ Not found ]
[23:33:47]     Checking for directory '/dev/rd/cdb'          [ Not found ]
[23:33:47]   Checking for suspicious directories             [ None found ]
[23:33:47]
[23:33:47] Info: Test 'ipc_shared_mem' disabled at users request.
[23:33:47]
[23:33:47] Info: Starting test name 'trojans'
[23:33:47] Performing trojan specific checks
[23:33:48]   Checking for enabled inetd services             [ Skipped ]
[23:33:48] Info: Check skipped - file '/etc/inetd.conf' does not exist.
[23:33:48]   Checking for enabled xinetd services            [ Skipped ]
[23:33:48] Info: Check skipped - file '/etc/xinetd.conf' does not exist.
[23:33:48]   Checking for Apache backdoor                    [ Not found ]
[23:33:48]
[23:33:48] Info: Starting test name 'os_specific'
[23:33:48]   Performing Linux specific checks
[23:33:48]     Checking loaded kernel modules                [ OK ]
[23:33:48] Info: Using modules pathname of '/lib/modules/5.2.11-200.fc30.x86_64'
[23:33:48]     Checking kernel module names                  [ OK ]
[23:34:48]
[23:34:48] Info: Starting test name 'network'
[23:34:48] Checking the network...
[23:34:48]
[23:34:48] Performing checks on the network ports
[23:34:48] Info: Starting test name 'ports'
[23:34:49]   Performing check for backdoor ports
[23:34:49]     Checking for TCP port 1524                    [ Not found ]
[23:34:49]     Checking for TCP port 1984                    [ Not found ]
[23:34:49]     Checking for UDP port 2001                    [ Not found ]
[23:34:49]     Checking for TCP port 2006                    [ Not found ]
[23:34:49]     Checking for TCP port 2128                    [ Not found ]
[23:34:49]     Checking for TCP port 6666                    [ Not found ]
[23:34:49]     Checking for TCP port 6667                    [ Not found ]
[23:34:49]     Checking for TCP port 6668                    [ Not found ]
[23:34:49]     Checking for TCP port 6669                    [ Not found ]
[23:34:49]     Checking for TCP port 7000                    [ Not found ]
[23:34:49]     Checking for TCP port 13000                   [ Not found ]
[23:34:49]     Checking for TCP port 14856                   [ Not found ]
[23:34:50]     Checking for TCP port 25000                   [ Not found ]
[23:34:50]     Checking for TCP port 29812                   [ Not found ]
[23:34:50]     Checking for TCP port 31337                   [ Not found ]
[23:34:50]     Checking for TCP port 32982                   [ Not found ]
[23:34:50]     Checking for TCP port 33369                   [ Not found ]
[23:34:50]     Checking for TCP port 47107                   [ Not found ]
[23:34:50]     Checking for TCP port 47018                   [ Not found ]
[23:34:50]     Checking for TCP port 60922                   [ Not found ]
[23:34:50]     Checking for TCP port 62883                   [ Not found ]
[23:34:50]     Checking for TCP port 65535                   [ Not found ]
[23:34:50]   Checking for backdoor ports                     [ None found ]
[23:34:50]
[23:34:50] Info: Test 'hidden_ports' disabled at users request.
[23:34:50]
[23:34:50] Performing checks on the network interfaces
[23:34:50] Info: Starting test name 'promisc'
[23:34:50]   Checking for promiscuous interfaces             [ None found ]
[23:34:50]
[23:34:50] Info: Test 'packet_cap_apps' disabled at users request.
[23:34:50]
[23:34:50] Info: Starting test name 'local_host'
[23:34:50] Checking the local host...
[23:34:51]
[23:34:51] Info: Starting test name 'startup_files'
[23:34:51] Performing system boot checks
[23:34:51]   Checking for local host name                    [ Found ]
[23:34:51]
[23:34:51] Info: Starting test name 'startup_malware'
[23:34:51]   Checking for system startup files               [ Found ]
[23:34:53]   Checking system startup files for malware       [ None found ]
[23:34:53]
[23:34:53] Info: Starting test name 'group_accounts'
[23:34:53] Performing group and account checks
[23:34:53]   Checking for passwd file                        [ Found ]
[23:34:53] Info: Found password file: /etc/passwd
[23:34:53]   Checking for root equivalent (UID 0) accounts   [ None found ]
[23:34:53] Info: Found shadow file: /etc/shadow
[23:34:53]   Checking for passwordless accounts              [ None found ]
[23:34:53]
[23:34:53] Info: Starting test name 'passwd_changes'
[23:34:53]   Checking for passwd file changes                [ Warning ]
[23:34:53] Warning: Unable to check for passwd file differences: no copy of the passwd file exists.
[23:34:53]
[23:34:53] Info: Starting test name 'group_changes'
[23:34:53]   Checking for group file changes                 [ Warning ]
[23:34:53] Warning: Unable to check for group file differences: no copy of the group file exists.
[23:34:53]   Checking root account shell history files       [ OK ]
[23:34:53]
[23:34:53] Info: Starting test name 'system_configs'
[23:34:53] Performing system configuration file checks
[23:34:53]
[23:34:53] Info: Starting test name 'system_configs_ssh'
[23:34:53]   Checking for an SSH configuration file          [ Found ]
[23:34:53] Info: Found an SSH configuration file: /etc/ssh/sshd_config
[23:34:53] Info: Rkhunter option ALLOW_SSH_ROOT_USER set to 'yes'.
[23:34:53] Info: Rkhunter option ALLOW_SSH_PROT_V1 set to '2'.
[23:34:53]   Checking if SSH root access is allowed          [ Allowed ]
[23:34:54]   Checking if SSH protocol v1 is allowed          [ Not set ]
[23:34:54]   Checking for other suspicious configuration settings [ None found ]
[23:34:54]
[23:34:54] Info: Starting test name 'system_configs_syslog'
[23:34:54]   Checking for a running system logging daemon    [ Found ]
[23:34:54] Info: A running 'rsyslog' daemon has been found.
[23:34:54] Info: A running 'systemd-journald' daemon has been found.
[23:34:54] Info: Found an rsyslog configuration file: /etc/rsyslog.conf
[23:34:54] Info: Found a systemd configuration file: /etc/systemd/journald.conf
[23:34:54]   Checking for a system logging configuration file [ Found ]
[23:34:54]   Checking if syslog remote logging is allowed    [ Not allowed ]
[23:34:54]
[23:34:54] Info: Starting test name 'filesystem'
[23:34:54] Performing filesystem checks
[23:34:54] Info: SCAN_MODE_DEV set to 'THOROUGH'
[23:34:57]   Checking /dev for suspicious file types         [ None found ]
[23:34:57] Info: Found hidden directory '/etc/.java': it is whitelisted.
[23:34:57] Info: Found hidden file '/etc/.updated': it is whitelisted.
[23:34:57] Info: Found hidden file '/usr/share/man/man5/.k5login.5.gz': it is whitelisted.
[23:34:57] Info: Found hidden file '/usr/share/man/man5/.k5identity.5.gz': it is whitelisted.
[23:34:57] Info: Found hidden file '/usr/share/man/man1/..1.gz': it is whitelisted.
[23:34:57]   Checking for hidden files and directories       [ Warning ]
[23:34:57] Warning: Hidden file found: /etc/.sysctl.conf.swn: Vim swap file, version 8.1, pid 7929, user root, host localhost.localdomain, file /etc/sysctl.conf, modified
[23:34:57] Warning: Hidden file found: /etc/.sysctl.conf.swo: Vim swap file, version 8.1, pid 7652, user root, host localhost.localdomain, file /etc/sysctl.conf, modified
[23:34:57] Warning: Hidden file found: /etc/.sysctl.conf.swp: Vim swap file, version 8.1, pid 6922, user root, host localhost.localdomain, file /etc/sysctl.conf, modified
[23:34:57]   Checking for missing log files                  [ Skipped ]
[23:34:57] Info: No missing log file names configured.
[23:34:57]   Checking for empty log files                    [ Skipped ]
[23:34:58] Info: No empty log file names configured.
[23:35:32]
[23:35:32] Info: Test 'apps' disabled at users request.
[23:35:32]
[23:35:32] System checks summary
[23:35:32] =====================
[23:35:32]
[23:35:32] File properties checks...
[23:35:32] Required commands check failed
[23:35:32] Files checked: 136
[23:35:32] Suspect files: 4
[23:35:32]
[23:35:32] Rootkit checks...
[23:35:32] Rootkits checked : 502
[23:35:32] Possible rootkits: 0
[23:35:32]
[23:35:32] Applications checks...
[23:35:32] All checks skipped
[23:35:32]
[23:35:32] The system checks took: 5 minutes and 19 seconds
[23:35:32]
[23:35:32] Info: End date is jeu. sept. 12 23:35:32 CEST 2019

pouver vous m'aider merci

Hors ligne

#2 13/09/2019 06:19:49

Nicosss
Membre
Lieu : Isère
Inscription : 05/03/2007
Messages : 5 025
Site Web

Re : [Résolu] rootkit detecté

Pense à utiliser les balises code <> https://forums.fedora-fr.org/help.php#bbcode pour plus de lisibilité dans le retour des commandes (prompt, commande et résultat complet).

Donne nous le message exacte de SELinux.

Chkrootkit ne semble rien avoir détecté en rootkit, juste des modifications de certains fichiers mais faudrait voir ce qui a été installé et la provenance surtout.


F30_64 Gnome-Shell - GA-990FXA-UD3 - Phenom II X6 1100T - NH-D14 - Ati HD 5750 Fanless - 16Go RAM /&/ F30_64 Gnome-Shell - Toshiba Satellite C660D-19X - 8Go RAM
F30_64 - ASRock 960GC-GS FX - AMD FX(tm)-8300 - 16Go RAM

Hors ligne

#3 13/09/2019 23:44:21

new10
Membre
Inscription : 12/09/2019
Messages : 7

Re : [Résolu] rootkit detecté

merci de m'avoir repondu Nicosss, désole comme je suis nouveau je savait pas
pour le message de selinux il a disparu apres que j'ai etient mon ordinateur
je sais pas ou le retrouver je suis aller dans menu jornaux pour le retrouver masi je le trouve pas
comme javait pris des precaution javait fait un screenshot
le voici

https://ibb.co/yYSWd9r

screenshot selinux

Hors ligne

#4 14/09/2019 01:30:02

Refuznik
Membre
Inscription : 31/01/2007
Messages : 7 392

Re : [Résolu] rootkit detecté

Bravo pour le screenshot, tu as bien fait.
Donc en fait tu n'as pas de rootkit sur ton ordinateur mais seulement selinux qui s'affole sur le processus rtkit. Norrmalement ce dernier fonctionne avec pulseaudio et d'autres programmes.

Name        : rtkit
Description :
RealtimeKit is a D-Bus system service that changes the
scheduling policy of user processes/threads to SCHED_RR (i.e. realtime
scheduling mode) on request. It is intended to be used as a secure
mechanism to allow real-time scheduling to be used by normal user
processes.

La commande suivante devrait te lister les programmes qui l'utilise histoire de te rassurer :

rpm -q --whatrequires rtkit

Dernière modification par Refuznik (14/09/2019 01:30:59)

Hors ligne

#5 14/09/2019 05:28:27

Nicosss
Membre
Lieu : Isère
Inscription : 05/03/2007
Messages : 5 025
Site Web

Re : [Résolu] rootkit detecté

Tu peux retrouver le message et les explications en recherchant l'application Journal des alertes SELinux.


F30_64 Gnome-Shell - GA-990FXA-UD3 - Phenom II X6 1100T - NH-D14 - Ati HD 5750 Fanless - 16Go RAM /&/ F30_64 Gnome-Shell - Toshiba Satellite C660D-19X - 8Go RAM
F30_64 - ASRock 960GC-GS FX - AMD FX(tm)-8300 - 16Go RAM

Hors ligne

#6 14/09/2019 22:28:06

new10
Membre
Inscription : 12/09/2019
Messages : 7

Re : [Résolu] rootkit detecté

merci Refuznik
vous mavez ressurer

j'ai introduit la commande Refuznik

voici ce que ca me donne

pipewire-0.2.6-3.fc30.x86_64
pulseaudio-12.2-9.fc30.x86_64

Hors ligne

#7 14/09/2019 22:30:08

new10
Membre
Inscription : 12/09/2019
Messages : 7

Re : [Résolu] rootkit detecté

merci Nicosss

oui effectivement j'ai trouver journeaux selinux comme vous me l'avez indiqué,

voici les détaille

SELinux interdit à rtkit-daemon d'utiliser l'accès sys_nice sur le cap_userns Inconnu.

*****  Le greffon catchall (100. de confiance) suggère   *********************

Si vous pensez que rtkit-daemon devrait être autorisé à accéder sys_nice sur Inconnu cap_userns par défaut.
Alors vous devriez rapporter ceci en tant qu'anomalie.
Vous pouvez générer un module de stratégie local pour autoriser cet accès.
Faire
autoriser cet accès pour le moment en exécutant :
# ausearch -c "rtkit-daemon" --raw | audit2allow -M my-rtkitdaemon
# semodule -X 300 -i my-rtkitdaemon.pp

Informations complémentaires :
Contexte source               system_u:system_r:rtkit_daemon_t:s0
Contexte cible                system_u:system_r:rtkit_daemon_t:s0
Objets du contexte            Inconnu [ cap_userns ]
Source                        rtkit-daemon
Chemin de la source           rtkit-daemon
Port                          <Inconnu>
Hôte                          localhost.localdomain
Paquets RPM source            
Paquets RPM cible             
RPM de la statégie            selinux-policy-3.14.3-45.fc30.noarch
Selinux activé                True
Type de stratégie             targeted
Mode strict                   Enforcing
Nom de l'hôte                 localhost.localdomain
Plateforme                    Linux localhost.localdomain 5.2.11-200.fc30.x86_64
                              #1 SMP Thu Aug 29 12:43:20 UTC 2019 x86_64 x86_64
Compteur d'alertes            8
Première alerte               2019-09-12 23:11:47 CEST
Dernière alerte               2019-09-12 23:11:47 CEST
ID local                      aa766802-e2bd-4445-aa4a-5a38da076476

Messages d'audit bruts 
type=AVC msg=audit(1568322707.286:342): avc:  denied  { sys_nice } for  pid=854 comm="rtkit-daemon" capability=23  scontext=system_u:system_r:rtkit_daemon_t:s0 tcontext=system_u:system_r:rtkit_daemon_t:s0 tclass=cap_userns permissive=0


Hash: rtkit-daemon,rtkit_daemon_t,rtkit_daemon_t,cap_userns,sys_nice

Hors ligne

Pied de page des forums