질문&답변
클라우드/리눅스에 관한 질문과 답변을 주고 받는 곳입니다.
리눅스 분류

chkrootkit결과 해석좀 부탁드립니다.

작성자 정보

  • 전양백 작성
  • 작성일

컨텐츠 정보

본문

안녕하세요.. 이곳을 자주 애용하는 리눅스 유저입니다.

얼마전에 제가 관리하는 회사 서버가 해킹을 당했습니다.

백도어를 설치하고 sshd를 계속 날리더군요..

일단 백도어는 제거하고 원상복구를 했다고 했는데

chkrootkit으로 돌리니까 아래와 같이 계속 메시지 나옵니다.

이거 해석을 부탁드릴려고요..어떤 문제인지....알수가 없네요..제실력으로...

고수님들 부탁드립니다.

/usr/lib/perl5/5.8.3/i386-linux-thread-multi/auto/MIME/Base64/.packlist /usr/lib/perl5/5.8.3/i386-linux-thread-multi/auto/File/Temp/.packlist /usr/lib/perl5/5.8.3/i386-linux-thread-multi/auto/Storable/.packlist /usr/lib/perl5/5.8.3/i386-linux-thread-multi/auto/CGI/.packlist /usr/lib/perl5/5.8.3/i386-linux-thread-multi/auto/Cwd/.packlist /usr/lib/perl5/5.8.3/i386-linux-thread-multi/auto/Text/.packlist /usr/lib/perl5/5.8.3/i386-linux-thread-multi/.packlist /usr/lib/perl5/vendor_perl/5.8.3/i386-linux-thread-multi/auto/Gaim/.packlist /usr/lib/perl5/vendor_perl/5.8.3/i386-linux-thread-multi/auto/mod_perl/.packlist /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi/auto/IO/Stringy/.packlist /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi/auto/DBI/.packlist /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi/auto/Template/.packlist /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi/auto/MIME-tools/.packlist /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi/auto/TimeDate/.packlist /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi/auto/Mail/.packlist /lib/modules/2.6.5-1.358smp/build/scripts/.pnmtologo.cmd /lib/modules/2.6.5-1.358smp/build/scripts/.bin2c.cmd /lib/modules/2.6.5-1.358smp/build/scripts/basic/.docproc.cmd /lib/modules/2.6.5-1.358smp/build/scripts/basic/.fixdep.cmd /lib/modules/2.6.5-1.358smp/build/scripts/basic/.split-include.cmd /lib/modules/2.6.5-1.358smp/build/scripts/.mk_elfconfig.cmd /lib/modules/2.6.5-1.358smp/build/scripts/.modpost.cmd /lib/modules/2.6.5-1.358smp/build/scripts/kconfig/.conf.cmd /lib/modules/2.6.5-1.358smp/build/scripts/kconfig/.zconf.tab.o.cmd /lib/modules/2.6.5-1.358smp/build/scripts/kconfig/.mconf.o.cmd /lib/modules/2.6.5-1.358smp/build/scripts/kconfig/.libkconfig.so.cmd /lib/modules/2.6.5-1.358smp/build/scripts/kconfig/.conf.o.cmd /lib/modules/2.6.5-1.358smp/build/scripts/.empty.o.cmd /lib/modules/2.6.5-1.358smp/build/scripts/.file2alias.o.cmd /lib/modules/2.6.5-1.358smp/build/scripts/.kallsyms.cmd /lib/modules/2.6.5-1.358smp/build/scripts/.conmakehash.cmd /lib/modules/2.6.5-1.358smp/build/scripts/.sumversion.o.cmd /lib/modules/2.6.5-1.358smp/build/scripts/.elfconfig.h.cmd /lib/modules/2.6.5-1.358smp/build/scripts/.modpost.o.cmd /lib/modules/2.6.5-1.358smp/build/.config /lib/modules/2.6.5-1.358/build/scripts/.pnmtologo.cmd /lib/modules/2.6.5-1.358/build/scripts/.bin2c.cmd /lib/modules/2.6.5-1.358/build/scripts/basic/.docproc.cmd /lib/modules/2.6.5-1.358/build/scripts/basic/.fixdep.cmd /lib/modules/2.6.5-1.358/build/scripts/basic/.split-include.cmd /lib/modules/2.6.5-1.358/build/scripts/.mk_elfconfig.cmd /lib/modules/2.6.5-1.358/build/scripts/.modpost.cmd /lib/modules/2.6.5-1.358/build/scripts/kconfig/.conf.cmd /lib/modules/2.6.5-1.358/build/scripts/kconfig/.zconf.tab.o.cmd /lib/modules/2.6.5-1.358/build/scripts/kconfig/.mconf.o.cmd /lib/modules/2.6.5-1.358/build/scripts/kconfig/.libkconfig.so.cmd /lib/modules/2.6.5-1.358/build/scripts/kconfig/.conf.o.cmd /lib/modules/2.6.5-1.358/build/scripts/.empty.o.cmd /lib/modules/2.6.5-1.358/build/scripts/.file2alias.o.cmd /lib/modules/2.6.5-1.358/build/scripts/.kallsyms.cmd /lib/modules/2.6.5-1.358/build/scripts/.conmakehash.cmd /lib/modules/2.6.5-1.358/build/scripts/.sumversion.o.cmd /lib/modules/2.6.5-1.358/build/scripts/.elfconfig.h.cmd /lib/modules/2.6.5-1.358/build/scripts/.modpost.o.cmd /lib/modules/2.6.5-1.358/build/.config

 The tty of the following user process(es) were not found
 in /var/run/utmp !
! RUID          PID TTY    CMD
! root         2121 tty1   /sbin/mingetty tty1
! root         2128 tty3   /sbin/mingetty tty3
! root         2134 tty4   /sbin/mingetty tty4
! root         2140 tty5   /sbin/mingetty tty5

관련자료

댓글 0
등록된 댓글이 없습니다.

공지사항


뉴스광장


  • 현재 회원수 :  60,138 명
  • 현재 강좌수 :  36,196 개
  • 현재 접속자 :  828 명