Every since happening upon https://www.youtube.com/watch?v=cOkX2KQxkQI through a class I’m taking on crypto and cybercrime (torpig was discussed), I’ve been tracking krebsonsecurity.com - and just finshsed “Worm” and “Cuckoo’s Egg” - so to heck with Windows. I think there should be a “Security Forum” on forums.opensuse.org.
rkhunter (from Opensuse 13.1x64 Repo)
linux-l8th:/home/patti # rkhunter -c
Rootkit Hunter version 1.4.2 ]
Checking system commands...
Performing 'strings' command checks
Checking 'strings' command OK ]
Performing 'shared libraries' checks
Checking for preloading variables None found ]
Checking for preloaded libraries None found ]
Checking LD_LIBRARY_PATH variable Not found ]
Performing file properties checks
Checking for prerequisites Warning ]
/usr/bin/awk OK ]
/usr/bin/basename OK ]
/usr/bin/cat OK ]
/usr/bin/chattr OK ]
/usr/bin/chkconfig Warning ]
/usr/bin/chmod OK ]
/usr/bin/runcon OK ]
/usr/bin/sed OK ]
/usr/bin/sh OK ]
/usr/bin/sha1sum OK ]
/usr/bin/sha224sum OK ]
/usr/bin/sha256sum OK ]
/usr/bin/sha384sum OK ]
/usr/bin/sha512sum OK ]
/usr/bin/users OK ]
/usr/bin/vmstat OK ]
/usr/bin/w OK ]
/usr/bin/watch OK ]
/usr/bin/wc OK ]
/usr/bin/wget OK ]
/usr/bin/whatis OK ]
/usr/bin/whereis OK ]
/usr/bin/which OK ]
/usr/bin/who OK ]
/usr/bin/whoami OK ]
/usr/bin/gawk OK ]
/usr/bin/tcsh OK ]
/usr/bin/mailx OK ]
/usr/bin/systemctl OK ]
/sbin/checkproc OK ]
/sbin/chkconfig OK ]
/sbin/depmod OK ]
/sbin/fsck OK ]
/sbin/ifconfig OK ]
/sbin/ifdown OK ]
/sbin/ifstatus OK ]
/sbin/ifup Warning ]
/sbin/init OK ]
/bin/sed OK ]
/bin/sh OK ]
/bin/sort OK ]
/bin/stat OK ]
/bin/su OK ]
/bin/touch OK ]
/bin/uname OK ]
/bin/gawk OK ]
/bin/tcsh OK ]
/bin/systemd OK ]
/bin/systemctl OK ]
/usr/lib/systemd/systemd OK ]
/etc/rkhunter.conf OK ]
[Press <ENTER> to continue]
Checking for rootkits...
Performing check of known rootkit files and directories
55808 Trojan - Variant A Not found ]
ADM Worm Not found ]
AjaKit Rootkit Not found ]
Adore Rootkit Not found ]
aPa Kit Not found ]
Apache Worm Not found ]
Ambient (ark) Rootkit Not found ]
Balaur Rootkit Not found ]
BeastKit Rootkit Not found ]
beX2 Rootkit Not found ]
BOBKit Rootkit Not found ]
cb Rootkit Not found ]
CiNIK Worm (Slapper.B variant) Not found ]
Danny-Boy's Abuse Kit Not found ]
Devil RootKit Not found ]
Dica-Kit Rootkit Not found ]
Dreams Rootkit Not found ]
Duarawkz Rootkit Not found ]
Enye LKM Not found ]
Flea Linux Rootkit Not found ]
Fu Rootkit Not found ]
****`it Rootkit Not found ]
GasKit Rootkit Not found ]
Heroin LKM Not found ]
HjC Kit Not found ]
ignoKit Rootkit Not found ]
IntoXonia-NG Rootkit Not found ]
Irix Rootkit Not found ]
Jynx Rootkit Not found ]
KBeast Rootkit Not found ]
Kitko Rootkit Not found ]
Knark Rootkit Not found ]
ld-linuxv.so Rootkit Not found ]
Li0n Worm Not found ]
Lockit / LJK2 Rootkit Not found ]
Mood-NT Rootkit Not found ]
MRK Rootkit Not found ]
Ni0 Rootkit Not found ]
Ohhara Rootkit Not found ]
Optic Kit (Tux) Worm Not found ]
Oz Rootkit Not found ]
Phalanx Rootkit Not found ]
Phalanx2 Rootkit Not found ]
Phalanx2 Rootkit (extended tests) Not found ]
Portacelo Rootkit Not found ]
R3dstorm Toolkit Not found ]
RH-Sharpe's Rootkit Not found ]
RSHA's Rootkit Not found ]
Scalper Worm Not found ]
Sebek LKM Not found ]
Shutdown Rootkit Not found ]
SHV4 Rootkit Not found ]
trNkit Rootkit Not found ]
Trojanit Kit Not found ]
Tuxtendo Rootkit Not found ]
URK Rootkit Not found ]
Vampire Rootkit Not found ]
VcKit Rootkit Not found ]
Volc Rootkit Not found ]
Xzibit Rootkit Not found ]
zaRwT.KiT Rootkit Not found ]
ZK Rootkit Not found ]
[Press <ENTER> to continue]
Performing additional rootkit checks
Suckit Rookit additional checks OK ]
Checking for possible rootkit files and directories None found ]
Checking for possible rootkit strings None found ]
Performing malware checks
Checking running processes for suspicious files None found ]
Checking for login backdoors None found ]
Checking for suspicious directories None found ]
Checking for sniffer log files None found ]
Suspicious Shared Memory segments None found ]
Performing trojan specific checks
Checking for enabled xinetd services None found ]
Performing Linux specific checks
Checking loaded kernel modules OK ]
Checking kernel module names OK ]
[Press <ENTER> to continue]
Checking the network...
Performing checks on the network ports
Checking for backdoor ports None found ]
Performing checks on the network interfaces
Checking for promiscuous interfaces None found ]
Checking the local host...
Performing system boot checks
Checking for local host name Found ]
Checking for system startup files Found ]
Checking system startup files for malware None found ]
Performing group and account checks
Checking for passwd file Found ]
Checking for root equivalent (UID 0) accounts None found ]
Checking for passwordless accounts None found ]
Checking for passwd file changes None found ]
Checking for group file changes None found ]
Checking root account shell history files OK ]
Performing system configuration file checks
Checking for an SSH configuration file Found ]
Checking if SSH root access is allowed Warning ]
Checking if SSH protocol v1 is allowed Warning ]
Checking for a running system logging daemon Found ]
Checking for a system logging configuration file Found ]
Checking if syslog remote logging is allowed Not allowed ]
Performing filesystem checks
Checking /dev for suspicious file types Warning ]
Checking for hidden files and directories Warning ]
[Press <ENTER> to continue]
Checking application versions...
Checking version of GnuPG OK ]
Checking version of OpenSSL OK ]
Checking version of PHP OK ]
Checking version of Procmail MTA OK ]
Checking version of OpenSSH OK ]
System checks summary
=====================
File properties checks...
Required commands check failed
Files checked: 186
Suspect files: 3
Rootkit checks...
Rootkits checked : 379
Possible rootkits: 0
Applications checks...
Applications checked: 5
Suspect applications: 0
The system checks took: 4 minutes and 51 seconds
All results have been written to the log file: /var/log/rkhunter.log
One or more warnings have been found while checking the system.
Please check the log file (/var/log/rkhunter.log)
linux-l8th:/home/patti #
linux-l8th:/home/patti # chkrootkit
Searching for Suckit rootkit… Warning: /sbin/init INFECTED
