질문&답변
클라우드/리눅스에 관한 질문과 답변을 주고 받는 곳입니다.
리눅스 분류

./chkrootkit -q 실행결과입니다. 해석좀.

작성자 정보

  • 삽질신 작성
  • 작성일

컨텐츠 정보

본문

[root@localhost chkrootkit-0.45]# ./chkrootkit -q
Checking `ifconfig'... INFECTED
Checking `pstree'... INFECTED
Possible t0rn v8 (or variation) rootkit installed

/usr/lib/anaconda-runtime/boot/ko_KR/.swp /usr/lib/perl5/5.6.1/i386-linux/.packlist /usr/lib/perl5/site_perl/5.6.0/i386-linux/auto/Gimp/.packlist /usr/lib/perl5/site_perl/5.6.0/i386-linux/auto/Image/Magick/.packlist

Warning: Possible Showtee Rootkit installed
/usr/include/file.h /usr/include/proc.h
ERROR: Thread display not implemented.
********* simple selection ********* ********* selection by list *********
-A all processes -C by command name
-N negate selection -G by real group ID (supports names)
-a all w/ tty except session leaders -U by real user ID (supports names)
-d all except session leaders -g by session leader OR by group name
-e all processes -p by process ID
T all processes on this terminal -s processes in the sessions given
a all w/ tty, including other users -t by tty
g all, even group leaders! -u by effective user ID (supports names)
r only running processes U processes for specified users
x processes w/o controlling ttys t by tty
*********** output format ********** *********** long options ***********
-o,o user-defined -f full --Group --User --pid --cols
-j,j job control s signal --group --user --sid --rows
-O,O preloaded -o v virtual memory --cumulative --format --deselect
-l,l long u user-oriented --sort --tty --forest --version
X registers --heading --no-heading
********* misc options *********
-V,V show version L list format codes f ASCII art forest
-m,m show threads S children in sum -y change -l format
-n,N set namelist file c true command name n numeric WCHAN,UID
-w,w wide output e show environment -H process heirarchy
OooPS!
chkproc: Warning: Possible LKM Trojan installed


---------------------------------------------------------------

내용은 이러합니다. 여기서 변조된 파일이 확실히 어떤거이며 삭제후 새것으로 교체하면 되는

겁니까 ? 그리고 추후 대책방법을 알려주십시요

관련자료

댓글 0
등록된 댓글이 없습니다.

공지사항


뉴스광장


  • 현재 회원수 :  60,138 명
  • 현재 강좌수 :  36,196 개
  • 현재 접속자 :  378 명