当前时区为 UTC + 8 小时



发表新帖 回复这个主题  [ 2 篇帖子 ] 
作者 内容
1 楼 
 文章标题 : 请教个比较小白点的问题,请大虾帮忙
帖子发表于 : 2009-09-15 21:48 

注册: 2009-07-28 16:07
帖子: 27
送出感谢: 0 次
接收感谢: 0 次
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 2822 0.0 0.0 1808 528 tty4 Ss+ 20:44 0:00 /sbin/getty 384
root 2823 0.0 0.0 1808 528 tty5 Ss+ 20:44 0:00 /sbin/getty 384
root 2826 0.0 0.0 1808 528 tty2 Ss+ 20:44 0:00 /sbin/getty 384
root 2827 0.0 0.0 1808 528 tty3 Ss+ 20:44 0:00 /sbin/getty 384
root 2828 0.0 0.0 1808 528 tty6 Ss+ 20:44 0:00 /sbin/getty 384
root 3677 4.8 3.8 79556 39480 tty7 Rs+ 20:49 2:32 /usr/bin/X :0 -
root 3967 0.0 0.0 1808 528 tty1 Ss+ 20:49 0:00 /sbin/getty 384
ubuntu 6313 0.1 0.3 6212 3244 pts/0 Ss 21:36 0:00 bash
ubuntu 6718 0.0 0.1 2768 1032 pts/0 R+ 21:42 0:00 ps -au
这是我输入ps -au的输出,我想知道为什么有TTY1-TTY6?我输入W的输出是2个USER,TTY7跟PTS/0
,还有我有RKHUNTER检测KIT病毒时候发现了一堆问题,可是用hkrootkit一点检测不出来,我怀疑标志为warning的SHELL都被修改过。。,请高手赐教
[21:49:13] Performing 'shared libraries' checks
[21:49:13] Info: Starting test name 'shared_libs'
[21:49:14] Checking for preloading variables [ None found ]
[21:49:14] Checking for preload file [ Not found ]
[21:49:14] Info: Starting test name 'shared_libs_path'
[21:49:14] Checking LD_LIBRARY_PATH variable [ Not found ]
[21:49:14]
[21:49:14] Performing file properties checks
[21:49:14] Info: Starting test name 'properties'
[21:49:14] Checking for prerequisites [ OK ]
[21:49:15] /bin/basename [ Warning ]
[21:49:15] Warning: The file '/bin/basename' exists on the system, but it is not present in the rkhunter.dat file.
[21:49:15] /bin/bash [ OK ]
[21:49:16] /bin/cat [ Warning ]
[21:49:16] Warning: The file properties have changed:
[21:49:16] File: /bin/cat
[21:49:16] Current inode: 708 Stored inode: 45
[21:49:17] /bin/chmod [ Warning ]
[21:49:17] Warning: The file properties have changed:
[21:49:17] File: /bin/chmod
[21:49:17] Current inode: 816 Stored inode: 48
[21:49:17] /bin/chown [ Warning ]
[21:49:17] Warning: The file properties have changed:
[21:49:18] File: /bin/chown
[21:49:18] Current inode: 817 Stored inode: 49
[21:49:18] /bin/cp [ Warning ]
[21:49:18] Warning: The file properties have changed:
[21:49:18] File: /bin/cp
[21:49:19] Current inode: 818 Stored inode: 51
[21:49:19] /bin/date [ Warning ]
[21:49:19] Warning: The file properties have changed:
[21:49:19] File: /bin/date
[21:49:19] Current inode: 819 Stored inode: 54
[21:49:20] /bin/df [ Warning ]
[21:49:20] Warning: The file properties have changed:
[21:49:20] File: /bin/df
[21:49:20] Current inode: 821 Stored inode: 60
[21:49:20] /bin/dmesg [ OK ]
[21:49:21] /bin/echo [ Warning ]
[21:49:21] Warning: The file properties have changed:
[21:49:21] File: /bin/echo
[21:49:21] Current inode: 823 Stored inode: 66
[21:49:21] /bin/ed [ OK ]
[21:49:22] /bin/egrep [ OK ]
[21:49:22] Info: Found file '/bin/egrep': it is whitelisted for the 'script replacement' check.
[21:49:23] /bin/fgrep [ OK ]
[21:49:23] Info: Found file '/bin/fgrep': it is whitelisted for the 'script replacement' check.
[21:49:23] /bin/fuser [ OK ]
[21:49:23] /bin/grep [ OK ]
[21:49:24] /bin/ip [ OK ]
[21:49:24] /bin/kill [ OK ]
[21:49:25] /bin/login [ OK ]
[21:49:25] /bin/ls [ Warning ]
[21:49:25] Warning: The file properties have changed:
[21:49:25] File: /bin/ls
[21:49:25] Current inode: 826 Stored inode: 91
[21:49:25] /bin/lsmod [ OK ]
[21:49:26] /bin/mktemp [ OK ]
[21:49:26] /bin/more [ OK ]
[21:49:27] /bin/mount [ OK ]
[21:49:27] /bin/mv [ Warning ]
[21:49:27] Warning: The file properties have changed:
[21:49:27] File: /bin/mv
[21:49:27] Current inode: 829 Stored inode: 102
[21:49:28] /bin/netstat [ OK ]
[21:49:28] /bin/ps [ OK ]
[21:49:29] /bin/pwd [ Warning ]
[21:49:29] Warning: The file properties have changed:
[21:49:29] File: /bin/pwd
[21:49:29] Current inode: 830 Stored inode: 123
[21:49:29] /bin/readlink [ Warning ]
[21:49:29] Warning: The file properties have changed:
[21:49:30] File: /bin/readlink
[21:49:30] Current inode: 831 Stored inode: 125
[21:49:30] /bin/sed [ OK ]
[21:49:30] /bin/sh [ OK ]
[21:49:31] /bin/su [ OK ]
[21:49:32] /bin/touch [ Warning ]
[21:49:32] Warning: The file properties have changed:
[21:49:32] File: /bin/touch
[21:49:32] Current inode: 845 Stored inode: 147
[21:49:32] /bin/uname [ Warning ]
[21:49:32] Warning: The file properties have changed:
[21:49:32] File: /bin/uname
[21:49:33] Current inode: 847 Stored inode: 151
[21:49:33] /bin/which [ OK ]
[21:49:33] Info: Found file '/bin/which': it is whitelisted for the 'script replacement' check.
[21:49:34] /bin/dash [ OK ]
[21:49:34] /usr/bin/awk [ Warning ]
[21:49:34] Warning: The file properties have changed:
[21:49:34] File: /usr/bin/awk
[21:49:34] Current hash: 90e423697f359d68af6e375aa48dd40a7ed21d13
[21:49:35] Stored hash : 5a62d856b17933d8e8930ab4a6f20d6a90053c79
[21:49:35] /usr/bin/basename [ Warning ]
[21:49:35] Warning: The file properties have changed:
[21:49:35] File: /usr/bin/basename
[21:49:35] Current inode: 184934 Stored inode: 28811
[21:49:36] /usr/bin/chattr [ OK ]
[21:49:36] /usr/bin/cut [ Warning ]
[21:49:36] Warning: The file properties have changed:
[21:49:36] File: /usr/bin/cut
[21:49:37] Current inode: 184906 Stored inode: 28909
[21:49:37] /usr/bin/diff [ OK ]
[21:49:37] /usr/bin/dirname [ Warning ]
[21:49:38] Warning: The file properties have changed:
[21:49:38] File: /usr/bin/dirname
[21:49:38] Current inode: 184935 Stored inode: 28954
[21:49:38] /usr/bin/dpkg [ OK ]
[21:49:38] /usr/bin/dpkg-query [ OK ]
[21:49:39] /usr/bin/du [ Warning ]
[21:49:39] Warning: The file properties have changed:
[21:49:39] File: /usr/bin/du
[21:49:39] Current inode: 31011 Stored inode: 28964
[21:49:40] /usr/bin/env [ Warning ]
[21:49:40] Warning: The file properties have changed:
[21:49:40] File: /usr/bin/env
[21:49:40] Current inode: 184936 Stored inode: 28996
[21:49:40] /usr/bin/file [ OK ]
[21:49:41] /usr/bin/find [ OK ]
[21:49:41] /usr/bin/GET [ OK ]
[21:49:42] /usr/bin/groups [ Warning ]
[21:49:42] Warning: The file properties have changed:
[21:49:42] File: /usr/bin/groups
[21:49:42] Current inode: 184952 Stored inode: 29232
[21:49:42] Info: Found file '/usr/bin/groups': it is whitelisted for the 'script replacement' check.
[21:49:43] /usr/bin/head [ Warning ]
[21:49:43] Warning: The file properties have changed:
[21:49:43] File: /usr/bin/head
[21:49:43] Current inode: 184910 Stored inode: 29286
[21:49:43] /usr/bin/id [ Warning ]
[21:49:44] Warning: The file properties have changed:
[21:49:44] File: /usr/bin/id
[21:49:44] Current inode: 184939 Stored inode: 29329
[21:49:45] /usr/bin/killall [ OK ]
[21:49:45] /usr/bin/last [ OK ]
[21:49:46] /usr/bin/lastlog [ OK ]
[21:49:47] /usr/bin/ldd [ OK ]
[21:49:47] Info: Found file '/usr/bin/ldd': it is whitelisted for the 'script replacement' check.
[21:49:47] /usr/bin/less [ OK ]
[21:49:47] /usr/bin/locate [ OK ]
[21:49:48] /usr/bin/logger [ OK ]
[21:49:48] /usr/bin/lsattr [ OK ]
[21:49:49] /usr/bin/lsof [ OK ]
[21:49:49] /usr/bin/mail [ OK ]
[21:49:50] /usr/bin/md5sum [ Warning ]
[21:49:50] Warning: The file properties have changed:
[21:49:50] File: /usr/bin/md5sum
[21:49:50] Current inode: 184912 Stored inode: 29439
[21:49:50] /usr/bin/mlocate [ OK ]
[21:49:51] /usr/bin/newgrp [ OK ]
[21:49:52] /usr/bin/passwd [ OK ]
[21:49:52] /usr/bin/perl [ OK ]
[21:49:53] /usr/bin/pstree [ OK ]
[21:49:54] /usr/bin/rkhunter [ OK ]
[21:49:54] /usr/bin/rpm [ OK ]
[21:49:55] /usr/bin/runcon [ Warning ]
[21:49:55] Warning: The file properties have changed:
[21:49:55] File: /usr/bin/runcon
[21:49:55] Current inode: 184944 Stored inode: 29721
[21:49:56] /usr/bin/sha1sum [ Warning ]
[21:49:57] Warning: The file properties have changed:
[21:49:57] File: /usr/bin/sha1sum
[21:49:57] Current inode: 184918 Stored inode: 29836
[21:49:58] /usr/bin/size [ OK ]
[21:49:59] /usr/bin/sort [ Warning ]
[21:50:00] Warning: The file properties have changed:
[21:50:00] File: /usr/bin/sort
[21:50:00] Current inode: 184924 Stored inode: 29868
[21:50:00] /usr/bin/stat [ Warning ]
[21:50:01] Warning: The file properties have changed:
[21:50:01] File: /usr/bin/stat
[21:50:01] Current inode: 184558 Stored inode: 29886
[21:50:03] /usr/bin/strace [ OK ]
[21:50:04] /usr/bin/strings [ OK ]
[21:50:04] /usr/bin/sudo [ OK ]
[21:50:05] /usr/bin/tail [ Warning ]
[21:50:05] Warning: The file properties have changed:
[21:50:05] File: /usr/bin/tail
[21:50:05] Current inode: 184928 Stored inode: 29902
[21:50:05] /usr/bin/test [ Warning ]
[21:50:06] Warning: The file properties have changed:
[21:50:06] File: /usr/bin/test
[21:50:06] Current inode: 184947 Stored inode: 29909
[21:50:06] /usr/bin/top [ OK ]
[21:50:06] /usr/bin/touch [ Warning ]
[21:50:06] Warning: The file properties have changed:
[21:50:06] File: /usr/bin/touch
[21:50:07] Current inode: 184954 Stored inode: 29931
[21:50:07] Current file modification time: 1252781683
[21:50:07] Stored file modification time : 1251995942
[21:50:07] /usr/bin/tr [ Warning ]
[21:50:07] Warning: The file properties have changed:
[21:50:07] File: /usr/bin/tr
[21:50:08] Current inode: 184929 Stored inode: 29933
[21:50:08] /usr/bin/uniq [ Warning ]
[21:50:08] Warning: The file properties have changed:
[21:50:08] File: /usr/bin/uniq
[21:50:08] Current inode: 184932 Stored inode: 29957
[21:50:09] /usr/bin/users [ Warning ]
[21:50:09] Warning: The file properties have changed:
[21:50:09] File: /usr/bin/users
[21:50:09] Current inode: 30443 Stored inode: 29974
[21:50:09] /usr/bin/vmstat [ OK ]
[21:50:10] /usr/bin/w [ OK ]
[21:50:10] /usr/bin/watch [ OK ]
[21:50:10] /usr/bin/wc [ Warning ]
[21:50:11] Warning: The file properties have changed:
[21:50:11] File: /usr/bin/wc
[21:50:11] Current inode: 184933 Stored inode: 29994
[21:50:11] /usr/bin/wget [ OK ]
[21:50:11] /usr/bin/whatis [ OK ]
[21:50:12] /usr/bin/whereis [ OK ]
[21:50:13] /usr/bin/which [ OK ]
[21:50:13] /usr/bin/who [ Warning ]
[21:50:13] Warning: The file properties have changed:
[21:50:13] File: /usr/bin/who
[21:50:14] Current inode: 30441 Stored inode: 30001
[21:50:14] /usr/bin/whoami [ Warning ]
[21:50:14] Warning: The file properties have changed:
[21:50:14] File: /usr/bin/whoami
[21:50:14] Current inode: 184949 Stored inode: 30002
[21:50:15] /usr/bin/gawk [ Warning ]
[21:50:15] Warning: The file '/usr/bin/gawk' exists on the system, but it is not present in the rkhunter.dat file.
[21:50:15] /usr/bin/lwp-request [ OK ]
[21:50:15] Info: Found file '/usr/bin/lwp-request': it is whitelisted for the 'script replacement' check.
[21:50:15] /usr/bin/bsd-mailx [ OK ]
[21:50:16] /usr/bin/w.procps [ OK ]
[21:50:17] /sbin/depmod [ OK ]
[21:50:17] /sbin/ifconfig [ OK ]
[21:50:18] /sbin/ifdown [ OK ]
[21:50:18] /sbin/ifup [ OK ]
[21:50:19] /sbin/init [ OK ]
[21:50:19] /sbin/insmod [ OK ]
[21:50:20] /sbin/ip [ OK ]
[21:50:20] /sbin/lsmod [ OK ]
[21:50:21] /sbin/modinfo [ OK ]
[21:50:21] /sbin/modprobe [ OK ]
[21:50:22] /sbin/rmmod [ OK ]
[21:50:22] /sbin/runlevel [ OK ]
[21:50:23] /sbin/sulogin [ OK ]
[21:50:23] /sbin/sysctl [ OK ]
[21:50:24] /sbin/syslogd [ OK ]
[21:50:25] /usr/sbin/adduser [ OK ]
[21:50:25] Info: Found file '/usr/sbin/adduser': it is whitelisted for the 'script replacement' check.
[21:50:25] /usr/sbin/chroot [ Warning ]
[21:50:26] Warning: The file properties have changed:
[21:50:26] File: /usr/sbin/chroot
[21:50:26] Current inode: 184953 Stored inode: 31326
[21:50:26] /usr/sbin/cron [ OK ]
[21:50:27] /usr/sbin/groupadd [ OK ]
[21:50:27] /usr/sbin/groupdel [ OK ]
[21:50:28] /usr/sbin/groupmod [ OK ]
[21:50:28] /usr/sbin/grpck [ OK ]
[21:50:29] /usr/sbin/nologin [ OK ]
[21:50:30] /usr/sbin/pwck [ OK ]
[21:50:31] /usr/sbin/tcpd [ OK ]
[21:50:31] /usr/sbin/unhide [ Warning ]
[21:50:31] Warning: The file '/usr/sbin/unhide' exists on the system, but it is not present in the rkhunter.dat file.
[21:50:31] /usr/sbin/useradd [ OK ]
[21:50:32] /usr/sbin/userdel [ OK ]
[21:50:32] /usr/sbin/usermod [ OK ]
[21:50:33] /usr/sbin/vipw [ OK ]
[21:50:33] /usr/sbin/unhide-linux26 [ Warning ]
[21:50:33] Warning: The file '/usr/sbin/unhide-linux26' exists on the system, but it is not present in the rkhunter.dat file.
[22:05:25]
[22:05:25] Checking for rootkits...
[22:05:25] Info: Starting test name 'rootkits'
[22:05:26]
[22:05:26] Performing check of known rootkit files and directories
[22:05:26] Info: Starting test name 'known_rkts'


页首
 用户资料  
 
2 楼 
 文章标题 : Re: 请教个比较小白点的问题,请大虾帮忙
帖子发表于 : 2009-09-16 22:41 

注册: 2008-10-15 10:49
帖子: 583
地址: CS
送出感谢: 0 次
接收感谢: 0 次
第一个问题:搜“tty linux","pts linux"


_________________
代码:
 _____________
< 呜呜buntu >
 -------------
        \   ^__^
         \  (oo)\_______
            (__)\       )\/\
                ||----w |
                ||     ||


页首
 用户资料  
 
显示帖子 :  排序  
发表新帖 回复这个主题  [ 2 篇帖子 ] 

当前时区为 UTC + 8 小时


在线用户

正在浏览此版面的用户:没有注册用户 和 4 位游客


不能 在这个版面发表主题
不能 在这个版面回复主题
不能 在这个版面编辑帖子
不能 在这个版面删除帖子
不能 在这个版面提交附件

前往 :  
本站点为公益性站点,用于推广开源自由软件,由 DiaHosting VPSBudgetVM VPS 提供服务。
我们认为:软件应可免费取得,软件工具在各种语言环境下皆可使用,且不会有任何功能上的差异;
人们应有定制和修改软件的自由,且方式不受限制,只要他们自认为合适。

Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
简体中文语系由 王笑宇 翻译