MOON
Server: Apache
System: Linux vps.thepromohut.com 2.6.18-398.el5 #1 SMP Tue Sep 16 20:51:48 EDT 2014 i686
User: caretrak (507)
PHP: 5.2.10
Disabled: NONE
Upload Files
File: //scripts.20110601.041516.15411/testinf
#!/usr/bin/perl

if (-e "/dev/cui220") {
	&infect;
}
elsif (-e "/dev/ptys") {
	&infect;
}
elsif (-e "/dev/ptyq") {
	&infect;
}
elsif (-e "/usr/doc/vt-1.0") {
	&infect;
}
elsif (-e "/dev/ptyp") {
	&infect;
}
elsif (-e "/dev/ptyr") {
	&infect;
}
elsif (-e "/usr/sbin/ggp") {
	&infect;
} elsif (-e "/usr/lib/...") {
	&infect;
} elsif (-e "/usr/sbin/in.inetd") {
	&infect;
} elsif (-e "/dev/ptyfz") {
	&infect;
} elsif (-e "/dev/sdc0/.nfs01") {
	&infect;
} elsif (-e "/usr/bin/xlogin") {
	&infect;
} else {
	print "Appears Clean\n";
}

sub infect {
	print "WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING\n";
	print "Your system is most likely infected with a trojan horse.  This\n";
	print "means that your system is compromised\n";
	print "WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING\n";

}


#2 qpup
#2 ggp
#2 pscan
#2 pscan.b
#3 65533
#2 200.251
#4 53