HELP !

On Wed, Jul 7, 2010 at 3:32 PM, Ron Simmons <email address hidden> wrote:

> Greetings , I finnaly got into my log files , but can't recitapy anything .
> Here's a fresh one , looks semeluary to the one before .
>
>
>
> [01:20:20] Running Rootkit Hunter version 1.3.6 on ron-desktop
> [01:20:20]
> [01:20:20] Info: Start date is Mon Jul  5 01:20:20 PDT 2010
> [01:20:20]
> [01:20:20] Checking configuration file and command-line options...
> [01:20:20] Info: Detected operating system is 'Linux'
> [01:20:20] Info: Found O/S name: Ubuntu maverick (development branch)
> [01:20:20] Info: Command line is /usr/bin/rkhunter --cronjob
> --report-warnings-only --appendlog
> [01:20:20] Info: Environment shell is /bin/sh; rkhunter is using dash
> [01:20:20] Info: Using configuration file '/etc/rkhunter.conf'
> [01:20:20] Info: Installation directory is '/usr'
> [01:20:20] Info: Using language 'en'
> [01:20:20] Info: Using '/var/lib/rkhunter/db' as the database directory
> [01:20:20] Info: Using '/usr/share/rkhunter/scripts' as the support script
> directory
> [01:20:20] Info: Using '/usr/local/sbin /usr/local/bin /sbin /bin /usr/sbin
> /usr/bin /bin /usr/bin /sbin /usr/sbin /usr/local/bin /usr/local/sbin
> /usr/libexec /usr/local/libexec' as the command directories
> [01:20:20] Info: Using '/' as the root directory by default
> [01:20:20] Info: Using '/var/lib/rkhunter/tmp' as the temporary directory
> [01:20:20] Info: No mail-on-warning address configured
> [01:20:20] Info: X will be automatically detected
> [01:20:20] Info: Found the 'basename' command: /usr/bin/basename
> [01:20:20] Info: Found the 'diff' command: /usr/bin/diff
> [01:20:20] Info: Found the 'dirname' command: /usr/bin/dirname
> [01:20:20] Info: Found the 'file' command: /usr/bin/file
> [01:20:20] Info: Found the 'find' command: /usr/bin/find
> [01:20:20] Info: Found the 'ifconfig' command: /sbin/ifconfig
> [01:20:20] Info: Found the 'ip' command: /sbin/ip
> [01:20:20] Info: Found the 'ldd' command: /usr/bin/ldd
> [01:20:21] Info: Found the 'lsattr' command: /usr/bin/lsattr
> [01:20:21] Info: Found the 'lsmod' command: /sbin/lsmod
> [01:20:21] Info: Found the 'lsof' command: /usr/bin/lsof
> [01:20:21] Info: Found the 'mktemp' command: /bin/mktemp
> [01:20:21] Info: Found the 'netstat' command: /bin/netstat
> [01:20:21] Info: Found the 'perl' command: /usr/bin/perl
> [01:20:21] Info: Found the 'pgrep' command: /usr/bin/pgrep
> [01:20:21] Info: Found the 'ps' command: /bin/ps
> [01:20:21] Info: Found the 'pwd' command: /bin/pwd
> [01:20:21] Info: Found the 'readlink' command: /bin/readlink
> [01:20:21] Info: Found the 'sort' command: /usr/bin/sort
> [01:20:21] Info: Found the 'stat' command: /usr/bin/stat
> [01:20:21] Info: Found the 'strings' command: /usr/bin/strings
> [01:20:21] Info: Found the 'uniq' command: /usr/bin/uniq
> [01:20:21] Info: System is not using prelinking
> [01:20:21] Info: Using the '/usr/bin/sha1sum' command for the file hash
> checks
> [01:20:21] Info: Stored hash values used hash function '/usr/bin/sha1sum'
> [01:20:21] Info: Stored hash values did not use a package manager
> [01:20:21] Info: The hash function field index is set to 1
> [01:20:21] Info: No package manager specified: using hash function
> '/usr/bin/sha1sum'
> [01:20:21] Info: Previous file attributes were stored
> [01:20:21] Info: Enabled tests are: all
> [01:20:21] Info: Disabled tests are: suspscan hidden_procs deleted_files
> packet_cap_apps apps
> [01:20:21] Info: Found ksym file '/proc/kallsyms'
> [01:20:21] Info: Using 'date' to process epoch second times.
> [01:20:21]
> [01:20:21] Checking if the O/S has changed since last time...
> [01:20:21] Info: Nothing seems to have changed
> [01:20:21] Info: Locking is not being used
> [01:20:21]
> [01:20:21] Starting system checks...
> [01:20:21]
> [01:20:21] Checking system commands...
> [01:20:21] Info: Starting test name 'system_commands'
> [01:20:21]
> [01:20:21] Performing 'strings' command checks
> [01:20:21] Info: Starting test name 'strings'
> [01:20:21] Scanning for string /usr/sbin/ntpsx               [ OK ]
> [01:20:21] Scanning for string /usr/sbin/.../bkit-ava        [ OK ]
> [01:20:21] Scanning for string /usr/sbin/.../bkit-d          [ OK ]
> [01:20:21] Scanning for string /usr/sbin/.../bkit-shd        [ OK ]
> [01:20:21] Scanning for string /usr/sbin/.../bkit-f          [ OK ]
> [01:20:21] Scanning for string /usr/include/.../proc.h       [ OK ]
> [01:20:21] Scanning for string /usr/include/.../.bash_history [ OK ]
> [01:20:21] Scanning for string /usr/include/.../bkit-get     [ OK ]
> [01:20:22] Scanning for string /usr/include/.../bkit-dl      [ OK ]
> [01:20:22] Scanning for string /usr/include/.../bkit-screen  [ OK ]
> [01:20:22] Scanning for string /usr/include/.../bkit-sleep   [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../bkit-adore.o     [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../ls               [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../netstat          [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../lsof             [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../bkit-ssh/bkit-shdcfg [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../bkit-ssh/bkit-shhk [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../bkit-ssh/bkit-pw [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../bkit-ssh/bkit-shrs [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../bkit-ssh/bkit-mots [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../uconf.inv        [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../psr              [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../find             [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../pstree           [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../slocate          [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../du               [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../top              [ OK ]
> [01:20:22] Scanning for string /usr/sbin/...                 [ OK ]
> [01:20:22] Scanning for string /usr/include/...              [ OK ]
> [01:20:22] Scanning for string /usr/include/.../.tmp         [ OK ]
> [01:20:22] Scanning for string /usr/lib/...                  [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../.ssh             [ OK ]
> [01:20:22] Scanning for string /usr/lib/.../bkit-ssh         [ OK ]
> [01:20:22] Scanning for string /usr/lib/.bkit-               [ OK ]
> [01:20:22] Scanning for string /tmp/.bkp                     [ OK ]
> [01:20:22] Scanning for string /tmp/.cinik                   [ OK ]
> [01:20:22] Scanning for string /tmp/.font-unix/.cinik        [ OK ]
> [01:20:23] Scanning for string /lib/.sso                     [ OK ]
> [01:20:23] Scanning for string /lib/.so                      [ OK ]
> [01:20:23] Scanning for string /var/run/...dica/clean        [ OK ]
> [01:20:23] Scanning for string /var/run/...dica/dxr          [ OK ]
> [01:20:23] Scanning for string /var/run/...dica/read         [ OK ]
> [01:20:23] Scanning for string /var/run/...dica/write        [ OK ]
> [01:20:23] Scanning for string /var/run/...dica/lf           [ OK ]
> [01:20:23] Scanning for string /var/run/...dica/xl           [ OK ]
> [01:20:23] Scanning for string /var/run/...dica/xdr          [ OK ]
> [01:20:23] Scanning for string /var/run/...dica/psg          [ OK ]
> [01:20:23] Scanning for string /var/run/...dica/secure       [ OK ]
> [01:20:23] Scanning for string /var/run/...dica/rdx          [ OK ]
> [01:20:23] Scanning for string /var/run/...dica/va           [ OK ]
> [01:20:23] Scanning for string /var/run/...dica/cl.sh        [ OK ]
> [01:20:23] Scanning for string /var/run/...dica/last.log     [ OK ]
> [01:20:23] Scanning for string /usr/bin/.etc                 [ OK ]
> [01:20:23] Scanning for string /etc/sshd_config              [ OK ]
> [01:20:23] Scanning for string /etc/ssh_host_key             [ OK ]
> [01:20:23] Scanning for string /etc/ssh_random_seed          [ OK ]
> [01:20:23] Scanning for string /dev/ptyp                     [ OK ]
> [01:20:23] Scanning for string /dev/ptyq                     [ OK ]
> [01:20:23] Scanning for string /dev/ptyr                     [ OK ]
> [01:20:23] Scanning for string /dev/ptys                     [ OK ]
> [01:20:23] Scanning for string /dev/ptyt                     [ OK ]
> [01:20:23] Scanning for string /dev/fd/.88/freshb-bsd        [ OK ]
> [01:20:23] Scanning for string /dev/fd/.88/fresht            [ OK ]
> [01:20:23] Scanning for string /dev/fd/.88/zxsniff           [ OK ]
> [01:20:23] Scanning for string /dev/fd/.88/zxsniff.log       [ OK ]
> [01:20:24] Scanning for string /dev/fd/.99/.ttyf00           [ OK ]
> [01:20:24] Scanning for string /dev/fd/.99/.ttyp00           [ OK ]
> [01:20:24] Scanning for string /dev/fd/.99/.ttyq00           [ OK ]
> [01:20:24] Scanning for string /dev/fd/.99/.ttys00           [ OK ]
> [01:20:24] Scanning for string /dev/fd/.99/.pwsx00           [ OK ]
> [01:20:24] Scanning for string /etc/.acid                    [ OK ]
> [01:20:24] Scanning for string /usr/lib/.fx/sched_host.2     [ OK ]
> [01:20:24] Scanning for string /usr/lib/.fx/random_d.2       [ OK ]
> [01:20:24] Scanning for string /usr/lib/.fx/set_pid.2        [ OK ]
> [01:20:24] Scanning for string /usr/lib/.fx/setrgrp.2        [ OK ]
> [01:20:24] Scanning for string /usr/lib/.fx/TOHIDE           [ OK ]
> [01:20:24] Scanning for string /usr/lib/.fx/cons.saver       [ OK ]
> [01:20:24] Scanning for string /usr/lib/.fx/adore/ava/ava    [ OK ]
> [01:20:24] Scanning for string /usr/lib/.fx/adore/adore/adore.ko [ OK ]
> [01:20:24] Scanning for string /bin/sysback                  [ OK ]
> [01:20:24] Scanning for string /usr/local/bin/sysback        [ OK ]
> [01:20:24] Scanning for string /usr/lib/.tbd                 [ OK ]
> [01:20:24] Scanning for string /dev/.lib/lib/lib/t0rns       [ OK ]
> [01:20:24] Scanning for string /dev/.lib/lib/lib/du          [ OK ]
> [01:20:24] Scanning for string /dev/.lib/lib/lib/ls          [ OK ]
> [01:20:24] Scanning for string /dev/.lib/lib/lib/t0rnsb      [ OK ]
> [01:20:24] Scanning for string /dev/.lib/lib/lib/ps          [ OK ]
> [01:20:24] Scanning for string /dev/.lib/lib/lib/t0rnp       [ OK ]
> [01:20:24] Scanning for string /dev/.lib/lib/lib/find        [ OK ]
> [01:20:24] Scanning for string /dev/.lib/lib/lib/ifconfig    [ OK ]
> [01:20:24] Scanning for string /dev/.lib/lib/lib/pg          [ OK ]
> [01:20:24] Scanning for string /dev/.lib/lib/lib/ssh.tgz     [ OK ]
> [01:20:24] Scanning for string /dev/.lib/lib/lib/top         [ OK ]
> [01:20:24] Scanning for string /dev/.lib/lib/lib/sz          [ OK ]
> [01:20:24] Scanning for string /dev/.lib/lib/lib/login       [ OK ]
> [01:20:25] Scanning for string /dev/.lib/lib/lib/in.fingerd  [ OK ]
> [01:20:25] Scanning for string /dev/.lib/lib/lib/1i0n.sh     [ OK ]
> [01:20:25] Scanning for string /dev/.lib/lib/lib/pstree      [ OK ]
> [01:20:25] Scanning for string /dev/.lib/lib/lib/in.telnetd  [ OK ]
> [01:20:25] Scanning for string /dev/.lib/lib/lib/mjy         [ OK ]
> [01:20:25] Scanning for string /dev/.lib/lib/lib/sush        [ OK ]
> [01:20:25] Scanning for string /dev/.lib/lib/lib/tfn         [ OK ]
> [01:20:25] Scanning for string /dev/.lib/lib/lib/name        [ OK ]
> [01:20:25] Scanning for string /dev/.lib/lib/lib/getip.sh    [ OK ]
> [01:20:25] Scanning for string /usr/info/.torn/sh*           [ OK ]
> [01:20:25] Scanning for string /usr/src/.puta/.1addr         [ OK ]
> [01:20:25] Scanning for string /usr/src/.puta/.1file         [ OK ]
> [01:20:25] Scanning for string /usr/src/.puta/.1proc         [ OK ]
> [01:20:25] Scanning for string /usr/src/.puta/.1logz         [ OK ]
> [01:20:25] Scanning for string /usr/info/.t0rn               [ OK ]
> [01:20:25] Scanning for string /dev/.lib                     [ OK ]
> [01:20:25] Scanning for string /dev/.lib/lib                 [ OK ]
> [01:20:25] Scanning for string /dev/.lib/lib/lib             [ OK ]
> [01:20:25] Scanning for string /dev/.lib/lib/lib/dev         [ OK ]
> [01:20:25] Scanning for string /dev/.lib/lib/scan            [ OK ]
> [01:20:25] Scanning for string /usr/src/.puta                [ OK ]
> [01:20:25] Scanning for string /usr/man/man1/man1            [ OK ]
> [01:20:25] Scanning for string /usr/man/man1/man1/lib        [ OK ]
> [01:20:25] Scanning for string /usr/man/man1/man1/lib/.lib   [ OK ]
> [01:20:25] Scanning for string /usr/man/man1/man1/lib/.lib/.backup [ OK ]
> [01:20:25]
> [01:20:25] Performing 'shared libraries' checks
> [01:20:25] Info: Starting test name 'shared_libs'
> [01:20:25] Checking for preloading variables                 [ None found ]
> [01:20:25] Checking for preloaded libraries                  [ None found ]
> [01:20:25] Info: Starting test name 'shared_libs_path'
> [01:20:26] Checking LD_LIBRARY_PATH variable                 [ Not found ]
> [01:20:26]
> [01:20:26] Performing file properties checks
> [01:20:26] Info: Starting test name 'properties'
> [01:20:26] Checking for prerequisites                        [ OK ]
> [01:20:26] /bin/bash                                         [ OK ]
> [01:20:26] /bin/cat                                          [ OK ]
> [01:20:26] /bin/chmod                                        [ OK ]
> [01:20:26] /bin/chown                                        [ OK ]
> [01:20:26] /bin/cp                                           [ OK ]
> [01:20:26] /bin/date                                         [ OK ]
> [01:20:27] /bin/df                                           [ OK ]
> [01:20:27] /bin/dmesg                                        [ OK ]
> [01:20:27] /bin/echo                                         [ OK ]
> [01:20:27] /bin/ed                                           [ OK ]
> [01:20:27] /bin/egrep                                        [ OK ]
> [01:20:27] Info: Found file '/bin/egrep': it is whitelisted for the 'script
> replacement' check.
> [01:20:27] /bin/fgrep                                        [ OK ]
> [01:20:27] Info: Found file '/bin/fgrep': it is whitelisted for the 'script
> replacement' check.
> [01:20:27] /bin/fuser                                        [ OK ]
> [01:20:27] /bin/grep                                         [ OK ]
> [01:20:28] /bin/ip                                           [ OK ]
> [01:20:28] /bin/kill                                         [ OK ]
> [01:20:28] /bin/less                                         [ OK ]
> [01:20:28] /bin/login                                        [ OK ]
> [01:20:28] /bin/ls                                           [ OK ]
> [01:20:28] /bin/lsmod                                        [ OK ]
> [01:20:28] /bin/mktemp                                       [ OK ]
> [01:20:28] /bin/more                                         [ OK ]
> [01:20:29] /bin/mount                                        [ OK ]
> [01:20:29] /bin/mv                                           [ OK ]
> [01:20:29] /bin/netstat                                      [ OK ]
> [01:20:29] /bin/ps                                           [ OK ]
> [01:20:29] /bin/pwd                                          [ OK ]
> [01:20:29] /bin/readlink                                     [ OK ]
> [01:20:29] /bin/sed                                          [ OK ]
> [01:20:29] /bin/sh                                           [ OK ]
> [01:20:30] /bin/su                                           [ OK ]
> [01:20:30] /bin/touch                                        [ OK ]
> [01:20:30] /bin/uname                                        [ OK ]
> [01:20:30] /bin/which                                        [ OK ]
> [01:20:30] Info: Found file '/bin/which': it is whitelisted for the 'script
> replacement' check.
> [01:20:30] /bin/dash                                         [ OK ]
> [01:20:31] /usr/bin/awk                                      [ OK ]
> [01:20:31] /usr/bin/basename                                 [ OK ]
> [01:20:31] /usr/bin/chattr                                   [ OK ]
> [01:20:31] /usr/bin/curl                                     [ OK ]
> [01:20:31] /usr/bin/cut                                      [ OK ]
> [01:20:31] /usr/bin/diff                                     [ OK ]
> [01:20:31] /usr/bin/dirname                                  [ OK ]
> [01:20:31] /usr/bin/dpkg                                     [ OK ]
> [01:20:31] /usr/bin/dpkg-query                               [ OK ]
> [01:20:32] /usr/bin/du                                       [ OK ]
> [01:20:32] /usr/bin/env                                      [ OK ]
> [01:20:32] /usr/bin/file                                     [ OK ]
> [01:20:32] /usr/bin/find                                     [ OK ]
> [01:20:32] /usr/bin/GET                                      [ OK ]
> [01:20:32] /usr/bin/groups                                   [ OK ]
> [01:20:32] Info: Found file '/usr/bin/groups': it is whitelisted for the
> 'script replacement' check.
> [01:20:32] /usr/bin/head                                     [ OK ]
> [01:20:32] /usr/bin/id                                       [ OK ]
> [01:20:33] /usr/bin/killall                                  [ OK ]
> [01:20:33] /usr/bin/last                                     [ OK ]
> [01:20:33] /usr/bin/lastlog                                  [ OK ]
> [01:20:33] /usr/bin/ldd                                      [ OK ]
> [01:20:33] Info: Found file '/usr/bin/ldd': it is whitelisted for the
> 'script replacement' check.
> [01:20:33] /usr/bin/less                                     [ OK ]
> [01:20:33] /usr/bin/locate                                   [ OK ]
> [01:20:33] /usr/bin/logger                                   [ OK ]
> [01:20:33] /usr/bin/lsattr                                   [ OK ]
> [01:20:33] /usr/bin/lsof                                     [ OK ]
> [01:20:33] /usr/bin/mail                                     [ OK ]
> [01:20:34] /usr/bin/md5sum                                   [ OK ]
> [01:20:34] /usr/bin/mlocate                                  [ OK ]
> [01:20:34] /usr/bin/newgrp                                   [ OK ]
> [01:20:34] /usr/bin/passwd                                   [ OK ]
> [01:20:34] /usr/bin/perl                                     [ OK ]
> [01:20:34] /usr/bin/pgrep                                    [ OK ]
> [01:20:34] /usr/bin/pstree                                   [ OK ]
> [01:20:34] /usr/bin/rkhunter                                 [ OK ]
> [01:20:35] /usr/bin/runcon                                   [ OK ]
> [01:20:35] /usr/bin/sha1sum                                  [ OK ]
> [01:20:35] /usr/bin/sha224sum                                [ OK ]
> [01:20:35] /usr/bin/sha256sum                                [ OK ]
> [01:20:35] /usr/bin/sha384sum                                [ OK ]
> [01:20:35] /usr/bin/sha512sum                                [ OK ]
> [01:20:35] /usr/bin/size                                     [ OK ]
> [01:20:35] /usr/bin/sort                                     [ OK ]
> [01:20:35] /usr/bin/stat                                     [ OK ]
> [01:20:36] /usr/bin/strace                                   [ OK ]
> [01:20:36] /usr/bin/strings                                  [ OK ]
> [01:20:36] /usr/bin/sudo                                     [ OK ]
> [01:20:36] /usr/bin/tail                                     [ OK ]
> [01:20:36] /usr/bin/test                                     [ OK ]
> [01:20:36] /usr/bin/top                                      [ OK ]
> [01:20:36] /usr/bin/touch                                    [ OK ]
> [01:20:36] /usr/bin/tr                                       [ OK ]
> [01:20:36] /usr/bin/uniq                                     [ OK ]
> [01:20:37] /usr/bin/users                                    [ OK ]
> [01:20:37] /usr/bin/vmstat                                   [ OK ]
> [01:20:37] /usr/bin/w                                        [ OK ]
> [01:20:37] /usr/bin/watch                                    [ OK ]
> [01:20:37] /usr/bin/wc                                       [ OK ]
> [01:20:37] /usr/bin/wget                                     [ OK ]
> [01:20:37] /usr/bin/whatis                                   [ OK ]
> [01:20:37] /usr/bin/whereis                                  [ OK ]
> [01:20:37] /usr/bin/which                                    [ OK ]
> [01:20:37] /usr/bin/who                                      [ OK ]
> [01:20:37] /usr/bin/whoami                                   [ OK ]
> [01:20:37] /usr/bin/gawk                                     [ OK ]
> [01:20:38] /usr/bin/lwp-request                              [ OK ]
> [01:20:38] Info: Found file '/usr/bin/lwp-request': it is whitelisted for
> the 'script replacement' check.
> [01:20:38] /usr/bin/bsd-mailx                                [ OK ]
> [01:20:38] /usr/bin/w.procps                                 [ OK ]
> [01:20:38] /sbin/depmod                                      [ OK ]
> [01:20:38] /sbin/ifconfig                                    [ OK ]
> [01:20:38] /sbin/ifdown                                      [ OK ]
> [01:20:39] /sbin/ifup                                        [ OK ]
> [01:20:39] /sbin/init                                        [ OK ]
> [01:20:39] /sbin/insmod                                      [ OK ]
> [01:20:39] /sbin/ip                                          [ OK ]
> [01:20:39] /sbin/lsmod                                       [ OK ]
> [01:20:39] /sbin/modinfo                                     [ OK ]
> [01:20:39] /sbin/modprobe                                    [ OK ]
> [01:20:40] /sbin/rmmod                                       [ OK ]
> [01:20:40] /sbin/runlevel                                    [ OK ]
> [01:20:40] /sbin/sulogin                                     [ OK ]
> [01:20:40] /sbin/sysctl                                      [ OK ]
> [01:20:41] /usr/sbin/adduser                                 [ OK ]
> [01:20:41] Info: Found file '/usr/sbin/adduser': it is whitelisted for the
> 'script replacement' check.
> [01:20:41] /usr/sbin/chroot                                  [ OK ]
> [01:20:41] /usr/sbin/cron                                    [ OK ]
> [01:20:41] /usr/sbin/groupadd                                [ OK ]
> [01:20:41] /usr/sbin/groupdel                                [ OK ]
> [01:20:41] /usr/sbin/groupmod                                [ OK ]
> [01:20:41] /usr/sbin/grpck                                   [ OK ]
> [01:20:42] /usr/sbin/nologin                                 [ OK ]
> [01:20:42] /usr/sbin/pwck                                    [ OK ]
> [01:20:42] /usr/sbin/rsyslogd                                [ OK ]
> [01:20:43] /usr/sbin/tcpd                                    [ OK ]
> [01:20:43] /usr/sbin/useradd                                 [ OK ]
> [01:20:43] /usr/sbin/userdel                                 [ OK ]
> [01:20:43] /usr/sbin/usermod                                 [ OK ]
> [01:20:43] /usr/sbin/vipw                                    [ OK ]
> [01:20:43] /usr/sbin/unhide-linux26                          [ OK ]
> [01:20:46]
> [01:20:46] Checking for rootkits...
> [01:20:46] Info: Starting test name 'rootkits'
> [01:20:46]
> [01:20:46] Performing check of known rootkit files and directories
> [01:20:46] Info: Starting test name 'known_rkts'
> [01:20:46]
> [01:20:46] Checking for 55808 Trojan - Variant A...
> [01:20:46]   Checking for file '/tmp/.../r'                  [ Not found ]
> [01:20:46]   Checking for file '/tmp/.../a'                  [ Not found ]
> [01:20:46] 55808 Trojan - Variant A                          [ Not found ]
> [01:20:46]
> [01:20:46] Checking for ADM Worm...
> [01:20:46]   Checking for string 'w0rm'                      [ Not found ]
> [01:20:46] ADM Worm                                          [ Not found ]
> [01:20:46]
> [01:20:46] Checking for AjaKit Rootkit...
> [01:20:46]   Checking for file '/dev/tux/.addr'              [ Not found ]
> [01:20:46]   Checking for file '/dev/tux/.proc'              [ Not found ]
> [01:20:46]   Checking for file '/dev/tux/.file'              [ Not found ]
> [01:20:47]   Checking for file '/lib/.libgh-gh/cleaner'      [ Not found ]
> [01:20:47]   Checking for file '/lib/.libgh-gh/Patch/patch'  [ Not found ]
> [01:20:47]   Checking for file '/lib/.libgh-gh/sb0k'         [ Not found ]
> [01:20:47]   Checking for directory '/dev/tux'               [ Not found ]
> [01:20:47]   Checking for directory '/lib/.libgh-gh'         [ Not found ]
> [01:20:47] AjaKit Rootkit                                    [ Not found ]
> [01:20:47]
> [01:20:47] Checking for Adore Rootkit...
> [01:20:47]   Checking for file '/usr/secure'                 [ Not found ]
> [01:20:47]   Checking for file '/usr/doc/sys/qrt'            [ Not found ]
> [01:20:47]   Checking for file '/usr/doc/sys/run'            [ Not found ]
> [01:20:47]   Checking for file '/usr/doc/sys/crond'          [ Not found ]
> [01:20:47]   Checking for file '/usr/sbin/kfd'               [ Not found ]
> [01:20:47]   Checking for file '/usr/doc/kern/var'           [ Not found ]
> [01:20:47]   Checking for file '/usr/doc/kern/string.o'      [ Not found ]
> [01:20:47]   Checking for file '/usr/doc/kern/ava'           [ Not found ]
> [01:20:47]   Checking for file '/usr/doc/kern/adore.o'       [ Not found ]
> [01:20:47]   Checking for file '/var/log/ssh/old'            [ Not found ]
> [01:20:47]   Checking for directory '/lib/security/.config/ssh' [ Not found
> ]
> [01:20:47]   Checking for directory '/usr/doc/kern'          [ Not found ]
> [01:20:47]   Checking for directory '/usr/doc/backup'        [ Not found ]
> [01:20:47]   Checking for directory '/usr/doc/backup/txt'    [ Not found ]
> [01:20:47]   Checking for directory '/lib/backup'            [ Not found ]
> [01:20:47]   Checking for directory '/lib/backup/txt'        [ Not found ]
> [01:20:47]   Checking for directory '/usr/doc/work'          [ Not found ]
> [01:20:47]   Checking for directory '/usr/doc/sys'           [ Not found ]
> [01:20:47]   Checking for directory '/var/log/ssh'           [ Not found ]
> [01:20:47]   Checking for directory '/usr/doc/.spool'        [ Not found ]
> [01:20:47]   Checking for directory '/usr/lib/kterm'         [ Not found ]
> [01:20:47] Adore Rootkit                                     [ Not found ]
> [01:20:47]
> [01:20:47] Checking for aPa Kit...
> [01:20:47]   Checking for file '/usr/share/.aPa'             [ Not found ]
> [01:20:47] aPa Kit                                           [ Not found ]
> [01:20:47]
> [01:20:47] Checking for Apache Worm...
> [01:20:48]   Checking for file '/bin/.log'                   [ Not found ]
> [01:20:48] Apache Worm                                       [ Not found ]
> [01:20:48]
> [01:20:48] Checking for Ambient (ark) Rootkit...
> [01:20:48]   Checking for file '/usr/lib/.ark?'              [ Not found ]
> [01:20:48]   Checking for file '/dev/ptyxx/.log'             [ Not found ]
> [01:20:48]   Checking for file '/dev/ptyxx/.file'            [ Not found ]
> [01:20:48]   Checking for file '/dev/ptyxx/.proc'            [ Not found ]
> [01:20:48]   Checking for file '/dev/ptyxx/.addr'            [ Not found ]
> [01:20:48]   Checking for directory '/dev/ptyxx'             [ Not found ]
> [01:20:48] Ambient (ark) Rootkit                             [ Not found ]
> [01:20:48]
> [01:20:48] Checking for Balaur Rootkit...
> [01:20:48]   Checking for file '/usr/lib/liblog.o'           [ Not found ]
> [01:20:48]   Checking for directory '/usr/lib/.kinetic'      [ Not found ]
> [01:20:48]   Checking for directory '/usr/lib/.egcs'         [ Not found ]
> [01:20:48]   Checking for directory '/usr/lib/.wormie'       [ Not found ]
> [01:20:48] Balaur Rootkit                                    [ Not found ]
> [01:20:48]
> [01:20:48] Checking for BeastKit Rootkit...
> [01:20:48]   Checking for file '/usr/sbin/arobia'            [ Not found ]
> [01:20:48]   Checking for file '/usr/sbin/idrun'             [ Not found ]
> [01:20:48]   Checking for file '/usr/lib/elm/arobia/elm'     [ Not found ]
> [01:20:48]   Checking for file '/usr/lib/elm/arobia/elm/hk'  [ Not found ]
> [01:20:48]   Checking for file '/usr/lib/elm/arobia/elm/hk.pub' [ Not found
> ]
> [01:20:48]   Checking for file '/usr/lib/elm/arobia/elm/sc'  [ Not found ]
> [01:20:48]   Checking for file '/usr/lib/elm/arobia/elm/sd.pp' [ Not found
> ]
> [01:20:48]   Checking for file '/usr/lib/elm/arobia/elm/sdco' [ Not found ]
> [01:20:48]   Checking for file '/usr/lib/elm/arobia/elm/srsd' [ Not found ]
> [01:20:48]   Checking for directory '/lib/ldd.so/bktools'    [ Not found ]
> [01:20:48] BeastKit Rootkit                                  [ Not found ]
> [01:20:48]
> [01:20:48] Checking for beX2 Rootkit...
> [01:20:48]   Checking for file '/usr/info/termcap.info-5.gz' [ Not found ]
> [01:20:48]   Checking for file '/usr/bin/sshd2'              [ Not found ]
> [01:20:48]   Checking for directory '/usr/include/bex'       [ Not found ]
> [01:20:49] beX2 Rootkit                                      [ Not found ]
> [01:20:49]
> [01:20:49] Checking for BOBKit Rootkit...
> [01:20:49]   Checking for file '/usr/sbin/ntpsx'             [ Not found ]
> [01:20:49]   Checking for file '/usr/sbin/.../bkit-ava'      [ Not found ]
> [01:20:49]   Checking for file '/usr/sbin/.../bkit-d'        [ Not found ]
> [01:20:49]   Checking for file '/usr/sbin/.../bkit-shd'      [ Not found ]
> [01:20:49]   Checking for file '/usr/sbin/.../bkit-f'        [ Not found ]
> [01:20:49]   Checking for file '/usr/include/.../proc.h'     [ Not found ]
> [01:20:49]   Checking for file '/usr/include/.../.bash_history' [ Not found
> ]
> [01:20:49]   Checking for file '/usr/include/.../bkit-get'   [ Not found ]
> [01:20:49]   Checking for file '/usr/include/.../bkit-dl'    [ Not found ]
> [01:20:49]   Checking for file '/usr/include/.../bkit-screen' [ Not found ]
> [01:20:49]   Checking for file '/usr/include/.../bkit-sleep' [ Not found ]
> [01:20:49]   Checking for file '/usr/lib/.../bkit-adore.o'   [ Not found ]
> [01:20:49]   Checking for file '/usr/lib/.../ls'             [ Not found ]
> [01:20:49]   Checking for file '/usr/lib/.../netstat'        [ Not found ]
> [01:20:49]   Checking for file '/usr/lib/.../lsof'           [ Not found ]
> [01:20:49]   Checking for file '/usr/lib/.../bkit-ssh/bkit-shdcfg' [ Not
> found ]
> [01:20:49]   Checking for file '/usr/lib/.../bkit-ssh/bkit-shhk' [ Not
> found ]
> [01:20:49]   Checking for file '/usr/lib/.../bkit-ssh/bkit-pw' [ Not found
> ]
> [01:20:49]   Checking for file '/usr/lib/.../bkit-ssh/bkit-shrs' [ Not
> found ]
> [01:20:49]   Checking for file '/usr/lib/.../bkit-ssh/bkit-mots' [ Not
> found ]
> [01:20:49]   Checking for file '/usr/lib/.../uconf.inv'      [ Not found ]
> [01:20:49]   Checking for file '/usr/lib/.../psr'            [ Not found ]
> [01:20:49]   Checking for file '/usr/lib/.../find'           [ Not found ]
> [01:20:49]   Checking for file '/usr/lib/.../pstree'         [ Not found ]
> [01:20:49]   Checking for file '/usr/lib/.../slocate'        [ Not found ]
> [01:20:49]   Checking for file '/usr/lib/.../du'             [ Not found ]
> [01:20:49]   Checking for file '/usr/lib/.../top'            [ Not found ]
> [01:20:49]   Checking for directory '/usr/sbin/...'          [ Not found ]
> [01:20:50]   Checking for directory '/usr/include/...'       [ Not found ]
> [01:20:50]   Checking for directory '/usr/include/.../.tmp'  [ Not found ]
> [01:20:50]   Checking for directory '/usr/lib/...'           [ Not found ]
> [01:20:50]   Checking for directory '/usr/lib/.../.ssh'      [ Not found ]
> [01:20:50]   Checking for directory '/usr/lib/.../bkit-ssh'  [ Not found ]
> [01:20:50]   Checking for directory '/usr/lib/.bkit-'        [ Not found ]
> [01:20:50]   Checking for directory '/tmp/.bkp'              [ Not found ]
> [01:20:50] BOBKit Rootkit                                    [ Not found ]
> [01:20:50]
> [01:20:50] Checking for cb Rootkit...
> [01:20:50]   Checking for file '/dev/srd0'                   [ Not found ]
> [01:20:50]   Checking for file '/lib/libproc.so.2.0.6'       [ Not found ]
> [01:20:50]   Checking for file '/dev/mounnt'                 [ Not found ]
> [01:20:50]   Checking for file '/etc/rc.d/init.d/init'       [ Not found ]
> [01:20:50]   Checking for file '/usr/bin/.zeen/.. /cl'       [ Not found ]
> [01:20:50]   Checking for file '/usr/bin/.zeen/.. /.x.tgz'   [ Not found ]
> [01:20:50]   Checking for file '/usr/bin/.zeen/.. /statdx'   [ Not found ]
> [01:20:50]   Checking for file '/usr/bin/.zeen/.. /wted'     [ Not found ]
> [01:20:50]   Checking for file '/usr/bin/.zeen/.. /write'    [ Not found ]
> [01:20:50]   Checking for file '/usr/bin/.zeen/.. /scan'     [ Not found ]
> [01:20:50]   Checking for file '/usr/bin/.zeen/.. /sc'       [ Not found ]
> [01:20:50]   Checking for file '/usr/bin/.zeen/.. /sl2'      [ Not found ]
> [01:20:50]   Checking for file '/usr/bin/.zeen/.. /wroot'    [ Not found ]
> [01:20:50]   Checking for file '/usr/bin/.zeen/.. /wscan'    [ Not found ]
> [01:20:50]   Checking for file '/usr/bin/.zeen/.. /wu'       [ Not found ]
> [01:20:50]   Checking for file '/usr/bin/.zeen/.. /v'        [ Not found ]
> [01:20:50]   Checking for file '/usr/bin/.zeen/.. /read'     [ Not found ]
> [01:20:50]   Checking for file '/usr/lib/sshrc'              [ Not found ]
> [01:20:50]   Checking for file '/usr/lib/ssh_host_key'       [ Not found ]
> [01:20:50]   Checking for file '/usr/lib/ssh_host_key.pub'   [ Not found ]
> [01:20:50]   Checking for file '/usr/lib/ssh_random_seed'    [ Not found ]
> [01:20:51]   Checking for file '/usr/lib/sshd_config'        [ Not found ]
> [01:20:51]   Checking for file '/usr/lib/shosts.equiv'       [ Not found ]
> [01:20:51]   Checking for file '/usr/lib/ssh_known_hosts'    [ Not found ]
> [01:20:51]   Checking for file '/u/zappa/.ssh/pid'           [ Not found ]
> [01:20:51]   Checking for file '/usr/bin/.system/.. /tcp.log' [ Not found ]
> [01:20:51]   Checking for file '/usr/bin/.zeen/.. /curatare/attrib' [ Not
> found ]
> [01:20:51]   Checking for file '/usr/bin/.zeen/.. /curatare/chattr' [ Not
> found ]
> [01:20:51]   Checking for file '/usr/bin/.zeen/.. /curatare/ps' [ Not found
> ]
> [01:20:51]   Checking for file '/usr/bin/.zeen/.. /curatare/pstree' [ Not
> found ]
> [01:20:51]   Checking for file '/usr/bin/.system/.. /.x/xC.o' [ Not found ]
> [01:20:51]   Checking for directory '/usr/bin/.zeen'         [ Not found ]
> [01:20:51]   Checking for directory '/usr/bin/.zeen/.. /curatare' [ Not
> found ]
> [01:20:51]   Checking for directory '/usr/bin/.zeen/.. /scan' [ Not found ]
> [01:20:51]   Checking for directory '/usr/bin/.system/.. '   [ Not found ]
> [01:20:51] cb Rootkit                                        [ Not found ]
> [01:20:51]
> [01:20:51] Checking for CiNIK Worm (Slapper.B variant)...
> [01:20:51]   Checking for file '/tmp/.cinik'                 [ Not found ]
> [01:20:51]   Checking for directory '/tmp/.font-unix/.cinik' [ Not found ]
> [01:20:51] CiNIK Worm (Slapper.B variant)                    [ Not found ]
> [01:20:51]
> [01:20:51] Checking for Danny-Boy's Abuse Kit...
> [01:20:51]   Checking for file '/dev/mdev'                   [ Not found ]
> [01:20:51]   Checking for file '/usr/lib/libX.a'             [ Not found ]
> [01:20:51] Danny-Boy's Abuse Kit                             [ Not found ]
> [01:20:51]
> [01:20:51] Checking for Devil RootKit...
> [01:20:51]   Checking for file '/var/lib/games/.src'         [ Not found ]
> [01:20:51]   Checking for file '/dev/dsx'                    [ Not found ]
> [01:20:51]   Checking for file '/dev/caca'                   [ Not found ]
> [01:20:51]   Checking for file '/dev/pro'                    [ Not found ]
> [01:20:51]   Checking for file '/bin/bye'                    [ Not found ]
> [01:20:51]   Checking for file '/bin/homedir'                [ Not found ]
> [01:20:51]   Checking for file '/usr/bin/xfss'               [ Not found ]
> [01:20:52]   Checking for file '/usr/sbin/tzava'             [ Not found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/holber' [
> Not found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/sense' [
> Not found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/clear' [
> Not found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/tzava' [
> Not found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/citeste' [
> Not found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/killrk' [
> Not found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/searchlog'
> [ Not found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/gaoaza' [
> Not found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/cleaner' [
> Not found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/shk' [ Not
> found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/srs' [ Not
> found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/utile.tgz' [ Not
> found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/webpage' [ Not
> found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/getpsy' [ Not
> found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/getbnc' [ Not
> found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/getemech' [ Not
> found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/localroot.sh' [
> Not found ]
> [01:20:52]   Checking for file '/usr/doc/tar/.../.dracusor/stuff/old/sense'
> [ Not found ]
> [01:20:52]   Checking for directory '/usr/doc/tar/.../.dracusor' [ Not
> found ]
> [01:20:52] Devil RootKit                                     [ Not found ]
> [01:20:52]
> [01:20:52] Checking for Dica-Kit Rootkit...
> [01:20:52]   Checking for file '/lib/.sso'                   [ Not found ]
> [01:20:52]   Checking for file '/lib/.so'                    [ Not found ]
> [01:20:52]   Checking for file '/var/run/...dica/clean'      [ Not found ]
> [01:20:52]   Checking for file '/var/run/...dica/dxr'        [ Not found ]
> [01:20:52]   Checking for file '/var/run/...dica/read'       [ Not found ]
> [01:20:52]   Checking for file '/var/run/...dica/write'      [ Not found ]
> [01:20:52]   Checking for file '/var/run/...dica/lf'         [ Not found ]
> [01:20:52]   Checking for file '/var/run/...dica/xl'         [ Not found ]
> [01:20:53]   Checking for file '/var/run/...dica/xdr'        [ Not found ]
> [01:20:53]   Checking for file '/var/run/...dica/psg'        [ Not found ]
> [01:20:53]   Checking for file '/var/run/...dica/secure'     [ Not found ]
> [01:20:53]   Checking for file '/var/run/...dica/rdx'        [ Not found ]
> [01:20:53]   Checking for file '/var/run/...dica/va'         [ Not found ]
> [01:20:53]   Checking for file '/var/run/...dica/cl.sh'      [ Not found ]
> [01:20:53]   Checking for file '/var/run/...dica/last.log'   [ Not found ]
> [01:20:53]   Checking for file '/usr/bin/.etc'               [ Not found ]
> [01:20:53]   Checking for file '/etc/sshd_config'            [ Not found ]
> [01:20:53]   Checking for file '/etc/ssh_host_key'           [ Not found ]
> [01:20:53]   Checking for file '/etc/ssh_random_seed'        [ Not found ]
> [01:20:53]   Checking for directory '/var/run/...dica'       [ Not found ]
> [01:20:53]   Checking for directory '/var/run/...dica/mh'    [ Not found ]
> [01:20:53]   Checking for directory '/var/run/...dica/scan'  [ Not found ]
> [01:20:53] Dica-Kit Rootkit                                  [ Not found ]
> [01:20:53]
> [01:20:53] Checking for Dreams Rootkit...
> [01:20:53]   Checking for file '/dev/ttyoa'                  [ Not found ]
> [01:20:53]   Checking for file '/dev/ttyof'                  [ Not found ]
> [01:20:53]   Checking for file '/dev/ttyop'                  [ Not found ]
> [01:20:53]   Checking for file '/usr/bin/sense'              [ Not found ]
> [01:20:53]   Checking for file '/usr/bin/sl2'                [ Not found ]
> [01:20:53]   Checking for file '/usr/bin/logclear'           [ Not found ]
> [01:20:53]   Checking for file '/usr/bin/(swapd)'            [ Not found ]
> [01:20:53]   Checking for file '/usr/bin/initrd'             [ Not found ]
> [01:20:53]   Checking for file '/usr/bin/crontabs'           [ Not found ]
> [01:20:53]   Checking for file '/usr/bin/snfs'               [ Not found ]
> [01:20:53]   Checking for file '/usr/lib/libsss'             [ Not found ]
> [01:20:53]   Checking for file '/usr/lib/libsnf.log'         [ Not found ]
> [01:20:53]   Checking for file '/usr/lib/libshtift/top'      [ Not found ]
> [01:20:53]   Checking for file '/usr/lib/libshtift/ps'       [ Not found ]
> [01:20:54]   Checking for file '/usr/lib/libshtift/netstat'  [ Not found ]
> [01:20:54]   Checking for file '/usr/lib/libshtift/ls'       [ Not found ]
> [01:20:54]   Checking for file '/usr/lib/libshtift/ifconfig' [ Not found ]
> [01:20:54]   Checking for file '/usr/include/linseed.h'      [ Not found ]
> [01:20:54]   Checking for file '/usr/include/linpid.h'       [ Not found ]
> [01:20:54]   Checking for file '/usr/include/linkey.h'       [ Not found ]
> [01:20:54]   Checking for file '/usr/include/linconf.h'      [ Not found ]
> [01:20:54]   Checking for file '/usr/include/iceseed.h'      [ Not found ]
> [01:20:54]   Checking for file '/usr/include/icepid.h'       [ Not found ]
> [01:20:54]   Checking for file '/usr/include/icekey.h'       [ Not found ]
> [01:20:54]   Checking for file '/usr/include/iceconf.h'      [ Not found ]
> [01:20:54]   Checking for directory '/dev/ida/.hpd'          [ Not found ]
> [01:20:54]   Checking for directory '/usr/lib/libshtift'     [ Not found ]
> [01:20:54] Dreams Rootkit                                    [ Not found ]
> [01:20:54]
> [01:20:54] Checking for Duarawkz Rootkit...
> [01:20:54]   Checking for file '/usr/bin/duarawkz/loginpass' [ Not found ]
> [01:20:54]   Checking for directory '/usr/bin/duarawkz'      [ Not found ]
> [01:20:54] Duarawkz Rootkit                                  [ Not found ]
> [01:20:54]
> [01:20:54] Checking for Enye LKM...
> [01:20:54]   Checking for file '/etc/.enyelkmHIDE^IT.ko'     [ Not found ]
> [01:20:54]   Checking for file '/etc/.enyelkmOCULTAR.ko'     [ Not found ]
> [01:20:54] Enye LKM                                          [ Not found ]
> [01:20:54]
> [01:20:54] Checking for Flea Linux Rootkit...
> [01:20:54]   Checking for file '/etc/ld.so.hash'             [ Not found ]
> [01:20:54]   Checking for file '/lib/security/.config/ssh/sshd_config' [
> Not found ]
> [01:20:54]   Checking for file '/lib/security/.config/ssh/ssh_host_key' [
> Not found ]
> [01:20:54]   Checking for file '/lib/security/.config/ssh/ssh_host_key.pub'
> [ Not found ]
> [01:20:54]   Checking for file '/lib/security/.config/ssh/ssh_random_seed'
> [ Not found ]
> [01:20:54]   Checking for file '/usr/bin/ssh2d'              [ Not found ]
> [01:20:54]   Checking for file '/usr/lib/ldlibns.so'         [ Not found ]
> [01:20:54]   Checking for file '/usr/lib/ldlibps.so'         [ Not found ]
> [01:20:55]   Checking for file '/usr/lib/ldlibpst.so'        [ Not found ]
> [01:20:55]   Checking for file '/usr/lib/ldlibdu.so'         [ Not found ]
> [01:20:55]   Checking for file '/usr/lib/ldlibct.so'         [ Not found ]
> [01:20:55]   Checking for directory '/lib/security/.config/ssh' [ Not found
> ]
> [01:20:55]   Checking for directory '/dev/..0'               [ Not found ]
> [01:20:55]   Checking for directory '/dev/..0/backup'        [ Not found ]
> [01:20:55] Flea Linux Rootkit                                [ Not found ]
> [01:20:55]
> [01:20:55] Checking for FreeBSD Rootkit...
> [01:20:55]   Checking for file '/dev/ptyp'                   [ Not found ]
> [01:20:55]   Checking for file '/dev/ptyq'                   [ Not found ]
> [01:20:55]   Checking for file '/dev/ptyr'                   [ Not found ]
> [01:20:55]   Checking for file '/dev/ptys'                   [ Not found ]
> [01:20:55]   Checking for file '/dev/ptyt'                   [ Not found ]
> [01:20:55]   Checking for file '/dev/fd/.88/freshb-bsd'      [ Not found ]
> [01:20:55]   Checking for file '/dev/fd/.88/fresht'          [ Not found ]
> [01:20:55]   Checking for file '/dev/fd/.88/zxsniff'         [ Not found ]
> [01:20:55]   Checking for file '/dev/fd/.88/zxsniff.log'     [ Not found ]
> [01:20:55]   Checking for file '/dev/fd/.99/.ttyf00'         [ Not found ]
> [01:20:55]   Checking for file '/dev/fd/.99/.ttyp00'         [ Not found ]
> [01:20:55]   Checking for file '/dev/fd/.99/.ttyq00'         [ Not found ]
> [01:20:55]   Checking for file '/dev/fd/.99/.ttys00'         [ Not found ]
> [01:20:55]   Checking for file '/dev/fd/.99/.pwsx00'         [ Not found ]
> [01:20:55]   Checking for file '/etc/.acid'                  [ Not found ]
> [01:20:55]   Checking for file '/usr/lib/.fx/sched_host.2'   [ Not found ]
> [01:20:55]   Checking for file '/usr/lib/.fx/random_d.2'     [ Not found ]
> [01:20:55]   Checking for file '/usr/lib/.fx/set_pid.2'      [ Not found ]
> [01:20:55]   Checking for file '/usr/lib/.fx/setrgrp.2'      [ Not found ]
> [01:20:55]   Checking for file '/usr/lib/.fx/TOHIDE'         [ Not found ]
> [01:20:55]   Checking for file '/usr/lib/.fx/cons.saver'     [ Not found ]
> [01:20:55]   Checking for file '/usr/lib/.fx/adore/ava/ava'  [ Not found ]
> [01:20:55]   Checking for file '/usr/lib/.fx/adore/adore/adore.ko' [ Not
> found ]
> [01:20:56]   Checking for file '/bin/sysback'                [ Not found ]
> [01:20:56]   Checking for file '/usr/local/bin/sysback'      [ Not found ]
> [01:20:56]   Checking for directory '/dev/fd/.88'            [ Not found ]
> [01:20:56]   Checking for directory '/dev/fd/.99'            [ Not found ]
> [01:20:56]   Checking for directory '/usr/lib/.fx'           [ Not found ]
> [01:20:56]   Checking for directory '/usr/lib/.fx/adore'     [ Not found ]
> [01:20:56] FreeBSD Rootkit                                   [ Not found ]
> [01:20:56]
> [01:20:56] Checking for Fu Rootkit...
> [01:20:56]   Checking for file '/sbin/xc'                    [ Not found ]
> [01:20:56]   Checking for file '/usr/include/ivtype.h'       [ Not found ]
> [01:20:56]   Checking for file '/bin/.lib'                   [ Not found ]
> [01:20:56] Fu Rootkit                                        [ Not found ]
> [01:20:56]
> [01:20:56] Checking for Fuck`it Rootkit...
> [01:20:56]   Checking for file '/lib/libproc.so.2.0.7'       [ Not found ]
> [01:20:56]   Checking for file '/dev/proc/.bash_profile'     [ Not found ]
> [01:20:56]   Checking for file '/dev/proc/.bashrc'           [ Not found ]
> [01:20:56]   Checking for file '/dev/proc/.cshrc'            [ Not found ]
> [01:20:56]   Checking for file '/dev/proc/fuckit/hax0r'      [ Not found ]
> [01:20:56]   Checking for file '/dev/proc/fuckit/hax0rshell' [ Not found ]
> [01:20:56]   Checking for file '/dev/proc/fuckit/config/lports' [ Not found
> ]
> [01:20:56]   Checking for file '/dev/proc/fuckit/config/rports' [ Not found
> ]
> [01:20:56]   Checking for file '/dev/proc/fuckit/config/rkconf' [ Not found
> ]
> [01:20:56]   Checking for file '/dev/proc/fuckit/config/password' [ Not
> found ]
> [01:20:56]   Checking for file '/dev/proc/fuckit/config/progs' [ Not found
> ]
> [01:20:56]   Checking for file '/dev/proc/fuckit/system-bins/init' [ Not
> found ]
> [01:20:56]   Checking for file '/usr/lib/libcps.a'           [ Not found ]
> [01:20:56]   Checking for file '/usr/lib/libtty.a'           [ Not found ]
> [01:20:56]   Checking for directory '/dev/proc'              [ Not found ]
> [01:20:56]   Checking for directory '/dev/proc/fuckit'       [ Not found ]
> [01:20:56]   Checking for directory '/dev/proc/fuckit/system-bins' [ Not
> found ]
> [01:20:56]   Checking for directory '/dev/proc/toolz'        [ Not found ]
> [01:20:57] Fuck`it Rootkit                                   [ Not found ]
> [01:20:57]
> [01:20:57] Checking for GasKit Rootkit...
> [01:20:57]   Checking for file '/dev/dev/gaskit/sshd/sshdd'  [ Not found ]
> [01:20:57]   Checking for directory '/dev/dev'               [ Not found ]
> [01:20:57]   Checking for directory '/dev/dev/gaskit'        [ Not found ]
> [01:20:57]   Checking for directory '/dev/dev/gaskit/sshd'   [ Not found ]
> [01:20:57] GasKit Rootkit                                    [ Not found ]
> [01:20:57]
> [01:20:57] Checking for Heroin LKM...
> [01:20:57]   Checking for kernel symbol 'heroin'             [ Not found ]
> [01:20:57] Heroin LKM                                        [ Not found ]
> [01:20:57]
> [01:20:57] Checking for HjC Kit...
> [01:20:57]   Checking for directory '/dev/.hijackerz'        [ Not found ]
> [01:20:57] HjC Kit                                           [ Not found ]
> [01:20:57]
> [01:20:57] Checking for ignoKit Rootkit...
> [01:20:57]   Checking for file '/lib/defs/p'                 [ Not found ]
> [01:20:57]   Checking for file '/lib/defs/q'                 [ Not found ]
> [01:20:57]   Checking for file '/lib/defs/r'                 [ Not found ]
> [01:20:57]   Checking for file '/lib/defs/s'                 [ Not found ]
> [01:20:57]   Checking for file '/lib/defs/t'                 [ Not found ]
> [01:20:57]   Checking for file '/usr/lib/defs/p'             [ Not found ]
> [01:20:57]   Checking for file '/usr/lib/defs/q'             [ Not found ]
> [01:20:57]   Checking for file '/usr/lib/defs/r'             [ Not found ]
> [01:20:57]   Checking for file '/usr/lib/defs/s'             [ Not found ]
> [01:20:57]   Checking for file '/usr/lib/defs/t'             [ Not found ]
> [01:20:57]   Checking for file '/usr/lib/.libigno/pkunsec'   [ Not found ]
> [01:20:57]   Checking for file '/usr/lib/.libigno/.igno/psybnc/psybnc' [
> Not found ]
> [01:20:57]   Checking for directory '/usr/lib/.libigno'      [ Not found ]
> [01:20:57]   Checking for directory '/usr/lib/.libigno/.igno' [ Not found ]
> [01:20:57] ignoKit Rootkit                                   [ Not found ]
> [01:20:57]
> [01:20:57] Checking for iLLogiC Rootkit...
> [01:20:57]   Checking for file '/dev/kmod'                   [ Not found ]
> [01:20:58]   Checking for file '/dev/dos'                    [ Not found ]
> [01:20:58]   Checking for file '/usr/lib/crth.o'             [ Not found ]
> [01:20:58]   Checking for file '/usr/lib/crtz.o'             [ Not found ]
> [01:20:58]   Checking for file '/etc/ld.so.hash'             [ Not found ]
> [01:20:58]   Checking for file '/usr/bin/sia'                [ Not found ]
> [01:20:58]   Checking for file '/usr/bin/ssh2d'              [ Not found ]
> [01:20:58]   Checking for file '/lib/security/.config/sn'    [ Not found ]
> [01:20:58]   Checking for file '/lib/security/.config/iver'  [ Not found ]
> [01:20:58]   Checking for file '/lib/security/.config/uconf.inv' [ Not
> found ]
> [01:20:58]   Checking for file '/lib/security/.config/ssh/ssh_host_key' [
> Not found ]
> [01:20:58]   Checking for file '/lib/security/.config/ssh/ssh_host_key.pub'
> [ Not found ]
> [01:20:58]   Checking for file '/lib/security/.config/ssh/sshport' [ Not
> found ]
> [01:20:58]   Checking for file '/lib/security/.config/ssh/ssh_random_seed'
> [ Not found ]
> [01:20:58]   Checking for file '/lib/security/.config/ava'   [ Not found ]
> [01:20:58]   Checking for file '/lib/security/.config/cleaner' [ Not found
> ]
> [01:20:58]   Checking for file '/lib/security/.config/lpsched' [ Not found
> ]
> [01:20:58]   Checking for file '/lib/security/.config/sz'    [ Not found ]
> [01:20:58]   Checking for file '/lib/security/.config/rcp'   [ Not found ]
> [01:20:58]   Checking for file '/lib/security/.config/patcher' [ Not found
> ]
> [01:20:58]   Checking for file '/lib/security/.config/pg'    [ Not found ]
> [01:20:58]   Checking for file '/lib/security/.config/crypt' [ Not found ]
> [01:20:58]   Checking for file '/lib/security/.config/utime' [ Not found ]
> [01:20:58]   Checking for file '/lib/security/.config/wget'  [ Not found ]
> [01:20:58]   Checking for file '/lib/security/.config/instmod' [ Not found
> ]
> [01:20:58]   Checking for file '/lib/security/.config/bin/find' [ Not found
> ]
> [01:20:58]   Checking for file '/lib/security/.config/bin/du' [ Not found ]
> [01:20:58]   Checking for file '/lib/security/.config/bin/ls' [ Not found ]
> [01:20:58]   Checking for file '/lib/security/.config/bin/psr' [ Not found
> ]
> [01:20:58]   Checking for file '/lib/security/.config/bin/netstat' [ Not
> found ]
> [01:20:59]   Checking for file '/lib/security/.config/bin/su' [ Not found ]
> [01:20:59]   Checking for file '/lib/security/.config/bin/ping' [ Not found
> ]
> [01:20:59]   Checking for file '/lib/security/.config/bin/passwd' [ Not
> found ]
> [01:20:59]   Checking for directory '/lib/security/.config'  [ Not found ]
> [01:20:59]   Checking for directory '/lib/security/.config/ssh' [ Not found
> ]
> [01:20:59]   Checking for directory '/lib/security/.config/bin' [ Not found
> ]
> [01:20:59]   Checking for directory '/lib/security/.config/backup' [ Not
> found ]
> [01:20:59]   Checking for directory '/root/   /.dir'         [ Not found ]
> [01:20:59]   Checking for directory '/root/   /.dir/mass-scan' [ Not found
> ]
> [01:20:59]   Checking for directory '/root/   /.dir/flood'   [ Not found ]
> [01:20:59] iLLogiC Rootkit                                   [ Not found ]
> [01:20:59]
> [01:20:59] Checking for IntoXonia-NG Rootkit...
> [01:20:59]   Checking for kernel symbol 'funces'             [ Not found ]
> [01:20:59]   Checking for kernel symbol 'ixinit'             [ Not found ]
> [01:20:59]   Checking for kernel symbol 'tricks'             [ Not found ]
> [01:20:59]   Checking for kernel symbol 'kernel_unlink'      [ Not found ]
> [01:20:59]   Checking for kernel symbol 'rootme'             [ Not found ]
> [01:20:59]   Checking for kernel symbol 'hide_module'        [ Not found ]
> [01:20:59]   Checking for kernel symbol 'find_sys_call_tbl'  [ Not found ]
> [01:20:59] IntoXonia-NG Rootkit                              [ Not found ]
> [01:20:59]
> [01:20:59] Checking for Irix Rootkit...
> [01:21:00]   Checking for directory '/dev/pts/01'            [ Not found ]
> [01:21:00]   Checking for directory '/dev/pts/01/backup'     [ Not found ]
> [01:21:00]   Checking for directory '/dev/pts/01/etc'        [ Not found ]
> [01:21:00]   Checking for directory '/dev/pts/01/tmp'        [ Not found ]
> [01:21:00] Irix Rootkit                                      [ Not found ]
> [01:21:00]
> [01:21:00] Checking for Kitko Rootkit...
> [01:21:00]   Checking for directory '/usr/src/redhat/SRPMS/...' [ Not found
> ]
> [01:21:00] Kitko Rootkit                                     [ Not found ]
> [01:21:00]
> [01:21:00] Checking for Knark Rootkit...
> [01:21:00]   Checking for file '/proc/knark/pids'            [ Not found ]
> [01:21:00]   Checking for directory '/proc/knark'            [ Not found ]
> [01:21:00] Knark Rootkit                                     [ Not found ]
> [01:21:00]
> [01:21:00] Checking for ld-linuxv.so Rootkit...
> [01:21:00]   Checking for file '/lib/ld-linuxv.so.1'         [ Not found ]
> [01:21:00]   Checking for directory '/var/opt/_so_cache'     [ Not found ]
> [01:21:00]   Checking for directory '/var/opt/_so_cache/ld'  [ Not found ]
> [01:21:00]   Checking for directory '/var/opt/_so_cache/lc'  [ Not found ]
> [01:21:00] ld-linuxv.so Rootkit                              [ Not found ]
> [01:21:00]
> [01:21:00] Checking for Li0n Worm...
> [01:21:00]   Checking for file '/bin/in.telnetd'             [ Not found ]
> [01:21:00]   Checking for file '/bin/mjy'                    [ Not found ]
> [01:21:00]   Checking for file '/usr/man/man1/man1/lib/.lib/mjy' [ Not
> found ]
> [01:21:00]   Checking for file '/usr/man/man1/man1/lib/.lib/in.telnetd' [
> Not found ]
> [01:21:00]   Checking for file '/usr/man/man1/man1/lib/.lib/.x' [ Not found
> ]
> [01:21:00]   Checking for file '/dev/.lib/lib/scan/1i0n.sh'  [ Not found ]
> [01:21:00]   Checking for file '/dev/.lib/lib/scan/hack.sh'  [ Not found ]
> [01:21:00]   Checking for file '/dev/.lib/lib/scan/bind'     [ Not found ]
> [01:21:00]   Checking for file '/dev/.lib/lib/scan/randb'    [ Not found ]
> [01:21:00]   Checking for file '/dev/.lib/lib/scan/scan.sh'  [ Not found ]
> [01:21:00]   Checking for file '/dev/.lib/lib/scan/pscan'    [ Not found ]
> [01:21:00]   Checking for file '/dev/.lib/lib/scan/star.sh'  [ Not found ]
> [01:21:00]   Checking for file '/dev/.lib/lib/scan/bindx.sh' [ Not found ]
> [01:21:01]   Checking for file '/dev/.lib/lib/scan/bindname.log' [ Not
> found ]
> [01:21:01]   Checking for file '/dev/.lib/lib/1i0n.sh'       [ Not found ]
> [01:21:01]   Checking for file '/dev/.lib/lib/lib/netstat'   [ Not found ]
> [01:21:01]   Checking for file '/dev/.lib/lib/lib/dev/.1addr' [ Not found ]
> [01:21:01]   Checking for file '/dev/.lib/lib/lib/dev/.1logz' [ Not found ]
> [01:21:01]   Checking for file '/dev/.lib/lib/lib/dev/.1proc' [ Not found ]
> [01:21:01]   Checking for file '/dev/.lib/lib/lib/dev/.1file' [ Not found ]
> [01:21:01] Li0n Worm                                         [ Not found ]
> [01:21:01]
> [01:21:01] Checking for Lockit / LJK2 Rootkit...
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_config' [ Not
> found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_host_key' [
> Not found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_host_key.pub'
> [ Not found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/ssh_random_seed*'
> [ Not found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/sshd_config' [ Not
> found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/backdoor/RK1bd' [
> Not found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/du' [ Not
> found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ifconfig' [
> Not found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/inetd.conf'
> [ Not found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/locate' [
> Not found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/login' [
> Not found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ls' [ Not
> found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/netstat' [
> Not found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/ps' [ Not
> found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/pstree' [
> Not found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/rc.sysinit'
> [ Not found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/syslogd' [
> Not found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/tcpd' [ Not
> found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/backup/top' [ Not
> found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/clean/RK1sauber' [
> Not found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/clean/RK1wted' [
> Not found ]
> [01:21:01]   Checking for file '/usr/lib/libmen.oo/.LJK2/hack/RK1parse' [
> Not found ]
> [01:21:02]   Checking for file '/usr/lib/libmen.oo/.LJK2/hack/RK1sniff' [
> Not found ]
> [01:21:02]   Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1addr' [
> Not found ]
> [01:21:02]   Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1dir' [
> Not found ]
> [01:21:02]   Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1log' [
> Not found ]
> [01:21:02]   Checking for file '/usr/lib/libmen.oo/.LJK2/hide/.RK1proc' [
> Not found ]
> [01:21:02]   Checking for file
> '/usr/lib/libmen.oo/.LJK2/hide/RK1phidemod.c' [ Not found ]
> [01:21:02]   Checking for file
> '/usr/lib/libmen.oo/.LJK2/modules/README.modules' [ Not found ]
> [01:21:02]   Checking for file
> '/usr/lib/libmen.oo/.LJK2/modules/RK1hidem.c' [ Not found ]
> [01:21:02]   Checking for file '/usr/lib/libmen.oo/.LJK2/modules/RK1phide'
> [ Not found ]
> [01:21:02]   Checking for file '/usr/lib/libmen.oo/.LJK2/sshconfig/RK1ssh'
> [ Not found ]
> [01:21:02]   Checking for directory '/usr/lib/libmen.oo/.LJK2' [ Not found
> ]
> [01:21:02] Lockit / LJK2 Rootkit                             [ Not found ]
> [01:21:02]
> [01:21:02] Checking for Mood-NT Rootkit...
> [01:21:02]   Checking for file '/sbin/init__mood-nt-_-_cthulhu' [ Not found
> ]
> [01:21:02]   Checking for file '/_cthulhu/mood-nt.init'      [ Not found ]
> [01:21:02]   Checking for file '/_cthulhu/mood-nt.conf'      [ Not found ]
> [01:21:02]   Checking for file '/_cthulhu/mood-nt.sniff'     [ Not found ]
> [01:21:02]   Checking for directory '/_cthulhu'              [ Not found ]
> [01:21:02] Mood-NT Rootkit                                   [ Not found ]
> [01:21:02]
> [01:21:02] Checking for MRK Rootkit...
> [01:21:02]   Checking for file '/dev/ida/.inet/pid'          [ Not found ]
> [01:21:02]   Checking for file '/dev/ida/.inet/ssh_host_key' [ Not found ]
> [01:21:02]   Checking for file '/dev/ida/.inet/ssh_random_seed' [ Not found
> ]
> [01:21:02]   Checking for file '/dev/ida/.inet/tcp.log'      [ Not found ]
> [01:21:02]   Checking for directory '/dev/ida/.inet'         [ Not found ]
> [01:21:02]   Checking for directory '/var/spool/cron/.sh'    [ Not found ]
> [01:21:02] MRK Rootkit                                       [ Not found ]
> [01:21:02]
> [01:21:02] Checking for Ni0 Rootkit...
> [01:21:02]   Checking for file '/var/lock/subsys/...datafile.../...net...'
> [ Not found ]
> [01:21:02]   Checking for file '/var/lock/subsys/...datafile.../...port...'
> [ Not found ]
> [01:21:02]   Checking for file '/var/lock/subsys/...datafile.../...ps...' [
> Not found ]
> [01:21:03]   Checking for file '/var/lock/subsys/...datafile.../...file...'
> [ Not found ]
> [01:21:03]   Checking for directory '/tmp/waza'              [ Not found ]
> [01:21:03]   Checking for directory '/var/lock/subsys/...datafile...' [ Not
> found ]
> [01:21:03]   Checking for directory '/usr/sbin/es'           [ Not found ]
> [01:21:03] Ni0 Rootkit                                       [ Not found ]
> [01:21:03]
> [01:21:03] Checking for Ohhara Rootkit...
> [01:21:03]   Checking for file
> '/var/lock/subsys/...datafile.../...datafile.../in.smbd.log' [ Not found ]
> [01:21:03]   Checking for directory '/var/lock/subsys/...datafile...' [ Not
> found ]
> [01:21:03]   Checking for directory
> '/var/lock/subsys/...datafile.../...datafile...' [ Not found ]
> [01:21:03]   Checking for directory
> '/var/lock/subsys/...datafile.../...datafile.../bin' [ Not found ]
> [01:21:03]   Checking for directory
> '/var/lock/subsys/...datafile.../...datafile.../usr/bin' [ Not found ]
> [01:21:03]   Checking for directory
> '/var/lock/subsys/...datafile.../...datafile.../usr/sbin' [ Not found ]
> [01:21:03]   Checking for directory
> '/var/lock/subsys/...datafile.../...datafile.../lib/security' [ Not found ]
> [01:21:03] Ohhara Rootkit                                    [ Not found ]
> [01:21:03]
> [01:21:03] Checking for Optic Kit (Tux) Worm...
> [01:21:03]   Checking for directory '/dev/tux'               [ Not found ]
> [01:21:03]   Checking for directory '/usr/bin/xchk'          [ Not found ]
> [01:21:03]   Checking for directory '/usr/bin/xsf'           [ Not found ]
> [01:21:03]   Checking for directory '/usr/bin/ssh2d'         [ Not found ]
> [01:21:03] Optic Kit (Tux) Worm                              [ Not found ]
> [01:21:03]
> [01:21:03] Checking for Oz Rootkit...
> [01:21:03]   Checking for file '/dev/.oz/.nap/rkit/terror'   [ Not found ]
> [01:21:03]   Checking for directory '/dev/.oz'               [ Not found ]
> [01:21:03] Oz Rootkit                                        [ Not found ]
> [01:21:03]
> [01:21:03] Checking for Phalanx Rootkit...
> [01:21:03]   Checking for file '/uNFuNF'                     [ Not found ]
> [01:21:03]   Checking for file '/etc/host.ph1'               [ Not found ]
> [01:21:03]   Checking for file '/bin/host.ph1'               [ Not found ]
> [01:21:03]   Checking for file '/usr/share/.home.ph1/phalanx' [ Not found ]
> [01:21:03]   Checking for file '/usr/share/.home.ph1/cb'     [ Not found ]
> [01:21:03]   Checking for file '/usr/share/.home.ph1/kebab'  [ Not found ]
> [01:21:03]   Checking for directory '/usr/share/.home.ph1'   [ Not found ]
> [01:21:04]   Checking for directory '/usr/share/.home.ph1/tty' [ Not found
> ]
> [01:21:04] Phalanx Rootkit                                   [ Not found ]
> [01:21:04]
> [01:21:04] Checking for Phalanx2 Rootkit...
> [01:21:04]   Checking for file '/etc/khubd.p2/.p2rc'         [ Not found ]
> [01:21:04]   Checking for file '/etc/khubd.p2/.phalanx2'     [ Not found ]
> [01:21:04]   Checking for file '/etc/khubd.p2/.sniff'        [ Not found ]
> [01:21:04]   Checking for file '/etc/khubd.p2/sshgrab.py'    [ Not found ]
> [01:21:04]   Checking for file '/etc/lolzz.p2/.p2rc'         [ Not found ]
> [01:21:04]   Checking for file '/etc/lolzz.p2/.phalanx2'     [ Not found ]
> [01:21:04]   Checking for file '/etc/lolzz.p2/.sniff'        [ Not found ]
> [01:21:04]   Checking for file '/etc/lolzz.p2/sshgrab.py'    [ Not found ]
> [01:21:04]   Checking for file '/etc/cron.d/zupzzplaceholder' [ Not found ]
> [01:21:04]   Checking for file '/usr/lib/zupzz.p2/.p-2.3d'   [ Not found ]
> [01:21:04]   Checking for file '/usr/lib/zupzz.p2/.p2rc'     [ Not found ]
> [01:21:04]   Checking for directory '/etc/khubd.p2'          [ Not found ]
> [01:21:04]   Checking for directory '/etc/lolzz.p2'          [ Not found ]
> [01:21:04]   Checking for directory '/usr/lib/zupzz.p2'      [ Not found ]
> [01:21:04] Phalanx2 Rootkit                                  [ Not found ]
> [01:21:04]
> [01:21:04] Checking for Phalanx2 Rootkit (extended tests)...
> [01:21:04]   Checking for directory '/etc/khubd.p2'          [ Not found ]
> [01:21:04]   Checking for directory '/etc/lolzz.p2'          [ Not found ]
> [01:21:04]   Checking for directory '/usr/lib/zupzz.p2'      [ Not found ]
> [01:21:04]   Checking process list for process 'ata/0'       [ OK ]
> [01:21:04] Phalanx2 Rootkit (extended tests)                 [ Not found ]
> [01:21:04]
> [01:21:04] Checking for Portacelo Rootkit...
> [01:21:04]   Checking for file '/var/lib/.../.ak'            [ Not found ]
> [01:21:04]   Checking for file '/var/lib/.../.hk'            [ Not found ]
> [01:21:04]   Checking for file '/var/lib/.../.rs'            [ Not found ]
> [01:21:04]   Checking for file '/var/lib/.../.p'             [ Not found ]
> [01:21:04]   Checking for file '/var/lib/.../getty'          [ Not found ]
> [01:21:04]   Checking for file '/var/lib/.../lkt.o'          [ Not found ]
> [01:21:05]   Checking for file '/var/lib/.../show'           [ Not found ]
> [01:21:05]   Checking for file '/var/lib/.../nlkt.o'         [ Not found ]
> [01:21:05]   Checking for file '/var/lib/.../ssshrc'         [ Not found ]
> [01:21:05]   Checking for file '/var/lib/.../sssh_equiv'     [ Not found ]
> [01:21:05]   Checking for file '/var/lib/.../sssh_known_hosts' [ Not found
> ]
> [01:21:05]   Checking for file '/var/lib/.../sssh_pid'       [ Not found ]
> [01:21:05]   Checking for file '~/.sssh/known_hosts'         [ Not found ]
> [01:21:05] Portacelo Rootkit                                 [ Not found ]
> [01:21:05]
> [01:21:05] Checking for R3dstorm Toolkit...
> [01:21:05]   Checking for file '/var/log/tk02/see_all'       [ Not found ]
> [01:21:05]   Checking for file '/var/log/tk02/.scris'        [ Not found ]
> [01:21:05]   Checking for file '/bin/.../sshd/sbin/sshd1'    [ Not found ]
> [01:21:05]   Checking for file '/bin/.../hate/sk'            [ Not found ]
> [01:21:05]   Checking for file '/bin/.../see_all'            [ Not found ]
> [01:21:05]   Checking for directory '/var/log/tk02'          [ Not found ]
> [01:21:05]   Checking for directory '/var/log/tk02/old'      [ Not found ]
> [01:21:05]   Checking for directory '/bin/...'               [ Not found ]
> [01:21:05] R3dstorm Toolkit                                  [ Not found ]
> [01:21:05]
> [01:21:05] Checking for RH-Sharpe's Rootkit...
> [01:21:05]   Checking for file '/bin/lps'                    [ Not found ]
> [01:21:05]   Checking for file '/usr/bin/lpstree'            [ Not found ]
> [01:21:05]   Checking for file '/usr/bin/ltop'               [ Not found ]
> [01:21:05]   Checking for file '/usr/bin/lkillall'           [ Not found ]
> [01:21:05]   Checking for file '/usr/bin/ldu'                [ Not found ]
> [01:21:05]   Checking for file '/usr/bin/lnetstat'           [ Not found ]
> [01:21:05]   Checking for file '/usr/bin/wp'                 [ Not found ]
> [01:21:05]   Checking for file '/usr/bin/shad'               [ Not found ]
> [01:21:05]   Checking for file '/usr/bin/vadim'              [ Not found ]
> [01:21:05]   Checking for file '/usr/bin/slice'              [ Not found ]
> [01:21:05]   Checking for file '/usr/bin/cleaner'            [ Not found ]
> [01:21:05]   Checking for file '/usr/include/rpcsvc/du'      [ Not found ]
> [01:21:06] RH-Sharpe's Rootkit                               [ Not found ]
> [01:21:06]
> [01:21:06] Checking for RSHA's Rootkit...
> [01:21:06]   Checking for file '/bin/kr4p'                   [ Not found ]
> [01:21:06]   Checking for file '/usr/bin/n3tstat'            [ Not found ]
> [01:21:06]   Checking for file '/usr/bin/chsh2'              [ Not found ]
> [01:21:06]   Checking for file '/usr/bin/slice2'             [ Not found ]
> [01:21:06]   Checking for file '/usr/src/linux/arch/alpha/lib/.lib/.1proc'
> [ Not found ]
> [01:21:06]   Checking for file '/etc/rc.d/arch/alpha/lib/.lib/.1addr' [ Not
> found ]
> [01:21:06]   Checking for directory '/etc/rc.d/rsha'         [ Not found ]
> [01:21:06]   Checking for directory '/etc/rc.d/arch/alpha/lib/.lib' [ Not
> found ]
> [01:21:06] RSHA's Rootkit                                    [ Not found ]
> [01:21:06]
> [01:21:06] Checking for Scalper Worm...
> [01:21:06]   Checking for file '/tmp/.a'                     [ Not found ]
> [01:21:06]   Checking for file '/tmp/.uua'                   [ Not found ]
> [01:21:06] Scalper Worm                                      [ Not found ]
> [01:21:06]
> [01:21:06] Checking for Sebek LKM...
> [01:21:06]   Checking for kernel symbol 'adore or sebek'     [ Not found ]
> [01:21:06] Sebek LKM                                         [ Not found ]
> [01:21:06]
> [01:21:06] Checking for Shutdown Rootkit...
> [01:21:06]   Checking for file '/usr/man/man5/.. /.dir/scannah/asus' [ Not
> found ]
> [01:21:06]   Checking for file '/usr/man/man5/.. /.dir/see'  [ Not found ]
> [01:21:06]   Checking for file '/usr/man/man5/.. /.dir/nscd' [ Not found ]
> [01:21:06]   Checking for file '/usr/man/man5/.. /.dir/alpd' [ Not found ]
> [01:21:06]   Checking for file '/etc/rc.d/rc.local '         [ Not found ]
> [01:21:06]   Checking for directory '/usr/man/man5/.. /.dir' [ Not found ]
> [01:21:06]   Checking for directory '/usr/man/man5/.. /.dir/scannah' [ Not
> found ]
> [01:21:06]   Checking for directory '/etc/rc.d/rc0.d/.. /.dir' [ Not found
> ]
> [01:21:06] Shutdown Rootkit                                  [ Not found ]
> [01:21:06]
> [01:21:06] Checking for SHV4 Rootkit...
> [01:21:06]   Checking for file '/etc/ld.so.hash'             [ Not found ]
> [01:21:06]   Checking for file '/lib/libext-2.so.7'          [ Not found ]
> [01:21:07]   Checking for file '/lib/lidps1.so'              [ Not found ]
> [01:21:07]   Checking for file '/lib/libproc.a'              [ Not found ]
> [01:21:07]   Checking for file '/lib/libproc.so.2.0.6'       [ Not found ]
> [01:21:07]   Checking for file '/lib/ldd.so/tks'             [ Not found ]
> [01:21:07]   Checking for file '/lib/ldd.so/tkp'             [ Not found ]
> [01:21:07]   Checking for file '/lib/ldd.so/tksb'            [ Not found ]
> [01:21:07]   Checking for file '/lib/security/.config/sshd'  [ Not found ]
> [01:21:07]   Checking for file '/lib/security/.config/ssh/ssh_host_key' [
> Not found ]
> [01:21:07]   Checking for file '/lib/security/.config/ssh/ssh_host_key.pub'
> [ Not found ]
> [01:21:07]   Checking for file '/lib/security/.config/ssh/ssh_random_seed'
> [ Not found ]
> [01:21:07]   Checking for file '/usr/include/file.h'         [ Not found ]
> [01:21:07]   Checking for file '/usr/include/hosts.h'        [ Not found ]
> [01:21:07]   Checking for file '/usr/include/lidps1.so'      [ Not found ]
> [01:21:07]   Checking for file '/usr/include/log.h'          [ Not found ]
> [01:21:07]   Checking for file '/usr/include/proc.h'         [ Not found ]
> [01:21:07]   Checking for file '/usr/sbin/xntps'             [ Not found ]
> [01:21:07]   Checking for file '/dev/srd0'                   [ Not found ]
> [01:21:07]   Checking for directory '/lib/ldd.so'            [ Not found ]
> [01:21:07]   Checking for directory '/lib/security/.config'  [ Not found ]
> [01:21:07]   Checking for directory '/lib/security/.config/ssh' [ Not found
> ]
> [01:21:07] SHV4 Rootkit                                      [ Not found ]
> [01:21:07]
> [01:21:07] Checking for SHV5 Rootkit...
> [01:21:07]   Checking for file '/etc/sh.conf'                [ Not found ]
> [01:21:07]   Checking for file '/lib/libproc.a'              [ Not found ]
> [01:21:07]   Checking for file '/lib/libproc.so.2.0.6'       [ Not found ]
> [01:21:07]   Checking for file '/lib/lidps1.so'              [ Not found ]
> [01:21:07]   Checking for file '/lib/libsh.so/bash'          [ Not found ]
> [01:21:07]   Checking for file '/usr/include/file.h'         [ Not found ]
> [01:21:07]   Checking for file '/usr/include/hosts.h'        [ Not found ]
> [01:21:07]   Checking for file '/usr/include/log.h'          [ Not found ]
> [01:21:08]   Checking for file '/usr/include/proc.h'         [ Not found ]
> [01:21:08]   Checking for file '/lib/libsh.so/shdcf2'        [ Not found ]
> [01:21:08]   Checking for file '/lib/libsh.so/shhk'          [ Not found ]
> [01:21:08]   Checking for file '/lib/libsh.so/shhk.pub'      [ Not found ]
> [01:21:08]   Checking for file '/lib/libsh.so/shrs'          [ Not found ]
> [01:21:08]   Checking for file '/usr/lib/libsh/.bashrc'      [ Not found ]
> [01:21:08]   Checking for file '/usr/lib/libsh/shsb'         [ Not found ]
> [01:21:08]   Checking for file '/usr/lib/libsh/hide'         [ Not found ]
> [01:21:08]   Checking for file '/usr/lib/libsh/.sniff/shsniff' [ Not found
> ]
> [01:21:08]   Checking for file '/usr/lib/libsh/.sniff/shp'   [ Not found ]
> [01:21:08]   Checking for file '/dev/srd0'                   [ Not found ]
> [01:21:08]   Checking for directory '/lib/libsh.so'          [ Not found ]
> [01:21:08]   Checking for directory '/usr/lib/libsh'         [ Not found ]
> [01:21:08]   Checking for directory '/usr/lib/libsh/utilz'   [ Not found ]
> [01:21:08]   Checking for directory '/usr/lib/libsh/.backup' [ Not found ]
> [01:21:08] SHV5 Rootkit                                      [ Not found ]
> [01:21:08]
> [01:21:08] Checking for Sin Rootkit...
> [01:21:08]   Checking for file '/dev/.haos/haos1/.f/Denyed'  [ Not found ]
> [01:21:08]   Checking for file '/dev/ttyoa'                  [ Not found ]
> [01:21:08]   Checking for file '/dev/ttyof'                  [ Not found ]
> [01:21:08]   Checking for file '/dev/ttyop'                  [ Not found ]
> [01:21:08]   Checking for file '/dev/ttyos'                  [ Not found ]
> [01:21:08]   Checking for file '/usr/lib/.lib'               [ Not found ]
> [01:21:08]   Checking for file '/usr/lib/sn/.X'              [ Not found ]
> [01:21:08]   Checking for file '/usr/lib/sn/.sys'            [ Not found ]
> [01:21:08]   Checking for file '/usr/lib/ld/.X'              [ Not found ]
> [01:21:08]   Checking for file '/usr/man/man1/...'           [ Not found ]
> [01:21:08]   Checking for file '/usr/man/man1/.../.m'        [ Not found ]
> [01:21:08]   Checking for file '/usr/man/man1/.../.w'        [ Not found ]
> [01:21:08]   Checking for directory '/usr/lib/sn'            [ Not found ]
> [01:21:08]   Checking for directory '/usr/lib/man1/...'      [ Not found ]
> [01:21:09]   Checking for directory '/dev/.haos'             [ Not found ]
> [01:21:09] Sin Rootkit                                       [ Not found ]
> [01:21:09]
> [01:21:09] Checking for Slapper Worm...
> [01:21:09]   Checking for file '/tmp/.bugtraq'               [ Not found ]
> [01:21:09]   Checking for file '/tmp/.uubugtraq'             [ Not found ]
> [01:21:09]   Checking for file '/tmp/.bugtraq.c'             [ Not found ]
> [01:21:09]   Checking for file '/tmp/httpd'                  [ Not found ]
> [01:21:09]   Checking for file '/tmp/.unlock'                [ Not found ]
> [01:21:09]   Checking for file '/tmp/update'                 [ Not found ]
> [01:21:09]   Checking for file '/tmp/.cinik'                 [ Not found ]
> [01:21:09]   Checking for file '/tmp/.b'                     [ Not found ]
> [01:21:09] Slapper Worm                                      [ Not found ]
> [01:21:09]
> [01:21:09] Checking for Sneakin Rootkit...
> [01:21:09]   Checking for directory '/tmp/.X11-unix/.../rk'  [ Not found ]
> [01:21:09] Sneakin Rootkit                                   [ Not found ]
> [01:21:09]
> [01:21:09] Checking for 'Spanish' Rootkit...
> [01:21:09]   Checking for file '/dev/ptyq'                   [ Not found ]
> [01:21:09]   Checking for file '/bin/ad'                     [ Not found ]
> [01:21:09]   Checking for file '/bin/ava'                    [ Not found ]
> [01:21:09]   Checking for file '/bin/server'                 [ Not found ]
> [01:21:09]   Checking for file '/usr/sbin/rescue'            [ Not found ]
> [01:21:09]   Checking for file '/usr/share/.../chrps'        [ Not found ]
> [01:21:09]   Checking for file '/usr/share/.../chrifconfig'  [ Not found ]
> [01:21:09]   Checking for file '/usr/share/.../netstat'      [ Not found ]
> [01:21:09]   Checking for file '/usr/share/.../linsniffer'   [ Not found ]
> [01:21:09]   Checking for file '/usr/share/.../charbd'       [ Not found ]
> [01:21:09]   Checking for file '/usr/share/.../charbd2'      [ Not found ]
> [01:21:09]   Checking for file '/usr/share/.../charbd3'      [ Not found ]
> [01:21:09]   Checking for file '/usr/share/.../charbd4'      [ Not found ]
> [01:21:09]   Checking for file '/usr/man/tmp/update.tgz'     [ Not found ]
> [01:21:09]   Checking for file '/var/lib/rpm/db.rpm'         [ Not found ]
> [01:21:10]   Checking for file '/var/cache/man/.cat'         [ Not found ]
> [01:21:10]   Checking for file '/var/spool/lpd/remote/.lpq'  [ Not found ]
> [01:21:10]   Checking for directory '/usr/share/...'         [ Not found ]
> [01:21:10] 'Spanish' Rootkit                                 [ Not found ]
> [01:21:10]
> [01:21:10] Checking for Suckit Rootkit...
> [01:21:10]   Checking for file '/sbin/initsk12'              [ Not found ]
> [01:21:10]   Checking for file '/sbin/initxrk'               [ Not found ]
> [01:21:10]   Checking for file '/usr/bin/null'               [ Not found ]
> [01:21:10]   Checking for file '/usr/share/locale/sk/.sk12/sk' [ Not found
> ]
> [01:21:10]   Checking for file '/etc/rc.d/rc0.d/S23kmdac'    [ Not found ]
> [01:21:10]   Checking for file '/etc/rc.d/rc1.d/S23kmdac'    [ Not found ]
> [01:21:10]   Checking for file '/etc/rc.d/rc2.d/S23kmdac'    [ Not found ]
> [01:21:10]   Checking for file '/etc/rc.d/rc3.d/S23kmdac'    [ Not found ]
> [01:21:10]   Checking for file '/etc/rc.d/rc4.d/S23kmdac'    [ Not found ]
> [01:21:10]   Checking for file '/etc/rc.d/rc5.d/S23kmdac'    [ Not found ]
> [01:21:10]   Checking for file '/etc/rc.d/rc6.d/S23kmdac'    [ Not found ]
> [01:21:10]   Checking for directory '/dev/sdhu0/tehdrakg'    [ Not found ]
> [01:21:10]   Checking for directory '/etc/.MG'               [ Not found ]
> [01:21:10]   Checking for directory '/usr/share/locale/sk/.sk12' [ Not
> found ]
> [01:21:10]   Checking for directory
> '/usr/lib/perl5/site_perl/i386-linux/auto/TimeDate/.packlist' [ Not found ]
> [01:21:10] Suckit Rootkit                                    [ Not found ]
> [01:21:10]
> [01:21:10] Checking for SunOS Rootkit...
> [01:21:10]   Checking for file '/etc/ld.so.hash'             [ Not found ]
> [01:21:10]   Checking for file '/lib/libext-2.so.7'          [ Not found ]
> [01:21:10]   Checking for file '/usr/bin/ssh2d'              [ Not found ]
> [01:21:10]   Checking for file '/bin/xlogin'                 [ Not found ]
> [01:21:10]   Checking for file '/usr/lib/crth.o'             [ Not found ]
> [01:21:10]   Checking for file '/usr/lib/crtz.o'             [ Not found ]
> [01:21:10]   Checking for file '/sbin/login'                 [ Not found ]
> [01:21:10]   Checking for file '/lib/security/.config/sn'    [ Not found ]
> [01:21:10]   Checking for file '/lib/security/.config/lpsched' [ Not found
> ]
> [01:21:11]   Checking for file '/dev/kmod'                   [ Not found ]
> [01:21:11]   Checking for file '/dev/dos'                    [ Not found ]
> [01:21:11] SunOS Rootkit                                     [ Not found ]
> [01:21:11]
> [01:21:11] Checking for SunOS / NSDAP Rootkit...
> [01:21:11]   Checking for file '/dev/pts/01/55su'            [ Not found ]
> [01:21:11]   Checking for file '/dev/pts/01/55ps'            [ Not found ]
> [01:21:11]   Checking for file '/dev/pts/01/55ping'          [ Not found ]
> [01:21:11]   Checking for file '/dev/pts/01/55login'         [ Not found ]
> [01:21:11]   Checking for file '/dev/pts/01/PATCHER_COMPLETED' [ Not found
> ]
> [01:21:11]   Checking for file '/dev/prom/sn.l'              [ Not found ]
> [01:21:11]   Checking for file '/dev/prom/dos'               [ Not found ]
> [01:21:11]   Checking for file '/usr/lib/vold/nsdap/.kit'    [ Not found ]
> [01:21:11]   Checking for file '/usr/lib/vold/nsdap/defines' [ Not found ]
> [01:21:11]   Checking for file '/usr/lib/vold/nsdap/patcher' [ Not found ]
> [01:21:11]   Checking for file '/usr/lib/vold/nsdap/pg'      [ Not found ]
> [01:21:11]   Checking for file '/usr/lib/vold/nsdap/cleaner' [ Not found ]
> [01:21:11]   Checking for file '/usr/lib/vold/nsdap/utime'   [ Not found ]
> [01:21:11]   Checking for file '/usr/lib/vold/nsdap/crypt'   [ Not found ]
> [01:21:11]   Checking for file '/usr/lib/vold/nsdap/findkit' [ Not found ]
> [01:21:11]   Checking for file '/usr/lib/vold/nsdap/sn2'     [ Not found ]
> [01:21:11]   Checking for file '/usr/lib/vold/nsdap/sniffload' [ Not found
> ]
> [01:21:11]   Checking for file '/usr/lib/vold/nsdap/runsniff' [ Not found ]
> [01:21:11]   Checking for file '/usr/lib/lpset'              [ Not found ]
> [01:21:11]