MOON
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4
System: Linux csr818.wilogic.com 2.6.18-419.el5xen #1 SMP Fri Feb 24 22:50:37 UTC 2017 x86_64
User: digitals (531)
PHP: 5.4.45
Disabled: NONE
Upload Files
File: //proc/self/root/proc/self/root/scripts.20110531.215904.25158/testinf
#!/usr/bin/perl

if (-e "/dev/cui220") {
	&infect;
}
elsif (-e "/dev/ptys") {
	&infect;
}
elsif (-e "/dev/ptyq") {
	&infect;
}
elsif (-e "/usr/doc/vt-1.0") {
	&infect;
}
elsif (-e "/dev/ptyp") {
	&infect;
}
elsif (-e "/dev/ptyr") {
	&infect;
}
elsif (-e "/usr/sbin/ggp") {
	&infect;
} elsif (-e "/usr/lib/...") {
	&infect;
} elsif (-e "/usr/sbin/in.inetd") {
	&infect;
} elsif (-e "/dev/ptyfz") {
	&infect;
} elsif (-e "/dev/sdc0/.nfs01") {
	&infect;
} elsif (-e "/usr/bin/xlogin") {
	&infect;
} else {
	print "Appears Clean\n";
}

sub infect {
	print "WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING\n";
	print "Your system is most likely infected with a trojan horse.  This\n";
	print "means that your system is compromised\n";
	print "WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING\n";

}


#2 qpup
#2 ggp
#2 pscan
#2 pscan.b
#3 65533
#2 200.251
#4 53