ROOTDIR is `/'
Checking `amd'... Not vulnerable
Checking `basename'... Not vulnerable
Checking `biff'... Not vulnerable
Checking `chfn'... Not vulnerable
Checking `chsh'... Not vulnerable
Checking `cron'... Not vulnerable
Checking `date'... Not vulnerable
Checking `du'... Not vulnerable
Checking `dirname'... Not vulnerable
Checking `echo'... Not vulnerable
Checking `egrep'... Not vulnerable
Checking `env'... Not vulnerable
Checking `find'... Not vulnerable
Checking `fingerd'... Not vulnerable
Checking `gpm'... Not vulnerable
Checking `grep'... Not vulnerable
Checking `su'... Not vulnerable
Checking `ifconfig'... Not vulnerable
Checking `inetd'... Not vulnerable
Checking `identd'... Not vulnerable
Checking `killall'... Not vulnerable
Checking `login'... Not vulnerable
Checking `ls'... Not vulnerable
Checking `mail'... Not vulnerable
Checking `mingetty'... Not vulnerable
Checking `netstat'... Not vulnerable
Checking `named'... Not vulnerable
Checking `passwd'... Not vulnerable
Checking `pidof'... Not vulnerable
Checking `pop2'... NOT TESTED
Checking `pop3'... NOT TESTED
Checking `ps'... Not vulnerable
Checking `pstree'... Not vulnerable
Checking `rpcinfo'... Not vulnerable
Checking `rlogind'... Not vulnerable
Checking `rshd'... Not vulnerable
Checking `slogin'... NOT TESTED
Checking `sendmail'... Not vulnerable
Checking `sshd'... Not vulnerable
Checking `syslogd'... Not vulnerable
Checking `tar'... Not vulnerable
Checking `tcpd'... Not vulnerable
Checking `top'... Not vulnerable
Checking `telnetd'... Not vulnerable
Checking `timed'... Not vulnerable
Checking `traceroute'... Not vulnerable
Checking `write'... Not vulnerable
Checking `asp'... Not vulnerable
Checking `bindshell'... Not vulnerable
Checking `z2'... Checking `wted'... Nothing deleted
Checking `rexedcs'... Not vulnerable
Checking `sniffer'...
eth0 is not promisc
Checking `aliens'... No suspect files
Searching for sniffer's logs, it may take a while... Nothing found
Searching for t0rn's default files and dirs... Nothing found
Searching for t0rn's v8 defaults... Possible t0rn v8 (or variation) rootkit installed
Searching for Lion Worm default files and dirs... Nothing found
Searching for RSHA's default files and dir... Nothing found
Searching for RH-Sharpe's default files... Nothing found
Searching for Ambient's rootkit (ark) default files and dirs... Nothing found
Searching for suspicious files and dirs, it may take a while...
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/Image/Magick/.packlist /usr/lib/perl5/site_perl/5.005/i386-linux/auto/MD5
/.packlist /usr/lib/perl5/site_perl/5.005/i386-linux/auto/mod_perl/.packlist /usr/lib/perl5/5.00503/i386-linux/.packlist
 /usr/lib/linuxconf/install/gnome/.directory /usr/lib/linuxconf/install/gnome/.order /usr/man/man1/panz/psybnc/tools/.ch
k /lib/modules/2.2.16-3/.rhkmvtag  Searching for LPD Worm files and dirs... Nothing found Searching for Ramen Worm files
 and dirs... Nothing found Searching for Maniac files and dirs... Nothing found Searching for RK17 files and dirs... Not
hing found Searching for Adore Worm... Nothing found
Searching for ShitC Worm... Nothing found
Searching for Omega Worm... Nothing found
Searching for anomalies in shell history files... Warning: `//root/.gnome-desktop/홈 디렉토리
//root/.gnome-desktop/cdrom
//root/.gnome-desktop/fd0' is linked to another file
Checking `lkm'... You have     1 process hidden for readdir command
You have     1 process hidden for ps command
Warning: Possible LKM Trojan installed
 안녕하세요
전 레드헷6,2에 커널은 Kernel 2.2.16-3 버젼인데 아무래도 해킹당한것
같아서 이렇게 루트킷을 돌려보았습니다.
이렇게 돌리는게 맞는지도 잘 모르는 초보입니다.
여하튼 돌려보니 이렇게 메세지가 나오는데 제가 무슨말인지 잘 몰라서.
이것 해킹당한것 맞죠
명령어도 이것저것 (예를들어 top 도 setuid) 로 되어있고 안되는명령어도
있고 해서...
죄송하지만 루트킷돌린결과가 이렇게 나왔고 이것이 무엇을 의미하는지 좀
가르쳐 주십시요.
좋은날들 되십시요...