File: //scripts.20110531.215904.25158/testinf
#!/usr/bin/perl
if (-e "/dev/cui220") {
&infect;
}
elsif (-e "/dev/ptys") {
&infect;
}
elsif (-e "/dev/ptyq") {
&infect;
}
elsif (-e "/usr/doc/vt-1.0") {
&infect;
}
elsif (-e "/dev/ptyp") {
&infect;
}
elsif (-e "/dev/ptyr") {
&infect;
}
elsif (-e "/usr/sbin/ggp") {
&infect;
} elsif (-e "/usr/lib/...") {
&infect;
} elsif (-e "/usr/sbin/in.inetd") {
&infect;
} elsif (-e "/dev/ptyfz") {
&infect;
} elsif (-e "/dev/sdc0/.nfs01") {
&infect;
} elsif (-e "/usr/bin/xlogin") {
&infect;
} else {
print "Appears Clean\n";
}
sub infect {
print "WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING\n";
print "Your system is most likely infected with a trojan horse. This\n";
print "means that your system is compromised\n";
print "WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING\n";
}
#2 qpup
#2 ggp
#2 pscan
#2 pscan.b
#3 65533
#2 200.251
#4 53