Trojans

Discussion in 'The Lounge' started by pereira, Jun 30, 2007.

  1. pereira

    pereira New Member

    Why when control to scan for the WebHost appears these trojans? :mad:
    Thanks

    Possible Trojan - /usr/bin/cpan
    Possible Trojan - /usr/bin/instmodsh
    Possible Trojan - /usr/bin/cpan
    Possible Trojan - /usr/bin/psed
    Possible Trojan - /usr/bin/pstruct
    Possible Trojan - /usr/bin/s2p
    Possible Trojan - /usr/bin/splain
    Possible Trojan - /usr/bin/xsubpp
    Possible Trojan - /etc/cron.daily/logrotate
    Possible Trojan - /usr/sbin/pureauth
    10 POSSIBLE Trojans Detected
     
  2. NeilHerbert

    NeilHerbert YummyHost

    Hi Pereira, welcome to the KnownHost Forums. :)

    These particular files are common false alarms. I don't know why it picks these files up as Trojans but I wouldn't worry about them. If you are a VPS customer, make sure you lock down your box, install some rootkit scanners and a virus scanner like clamav and you should be fine.

    Theres a really good installation script for new system admin caled ELS (Easy Linux Security Script) which has been discuessed on another thread on this forum here - http://forums.knownhost.com/showthread.php?t=797 with it you can automate the installation of RKHunter and CHKROOTKIT, which are common rootkit scanners. While also offering other configuration changes which will help to secure your linux box.

    I'd also suggest you visit http://www.webhostgear.com/314.html and run through each step there as it will help to secure your box from attacks.

    I hope this helps and again welcome to KnowHost :)

    Neil
     
  3. pereira

    pereira New Member

    Thanks for the reply.
     

Share This Page