X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?p=ossec-hids.git;a=blobdiff_plain;f=src%2Frootcheck%2Fdb%2Frootkit_files.txt;h=3e6e466d18aa5934e433d8cd14615d2bb145f8cd;hp=624c4fec74841ee69ff6e8e5280c0900f1fe902a;hb=6ef2f786c6c8ead94841b5f93baf9f43421f08c8;hpb=914feba5d54f979cd5d7e69c349c3d01f630042a

diff --git a/src/rootcheck/db/rootkit_files.txt b/src/rootcheck/db/rootkit_files.txt
index 624c4fe..3e6e466 100755
--- a/src/rootcheck/db/rootkit_files.txt
+++ b/src/rootcheck/db/rootkit_files.txt
@@ -1,4 +1,5 @@
-# @(#) $Id: rootkit_files.txt,v 1.21 2009/01/29 16:53:37 dcid Exp $
+# @(#) $Id: ./src/rootcheck/db/rootkit_files.txt, 2011/09/08 dcid Exp $
+
 #
 # rootkit_files.txt, (C) Daniel B. Cid
 # Imported from the rootcheck project.
@@ -353,7 +354,6 @@ etc/.bmbl/sk            ! BMBL rootkit
 # Cback Linux worm
 tmp/cback              ! cback worm ::/rootkits/cback.php
 tmp/derfiq             ! cback worm ::/rootkits/cback.php
-*/cback                ! cback worm ::/rootkits/cback.php
 
 
 # aPa Kit (from rkhunter)
@@ -373,8 +373,8 @@ dev/grid-unhide-port-  ! Override rootkit ::/rootkits/override.php
 
 
 # PHALANX rootkit
-usr/share/.home.ph1     ! PHALANX rootkit ::
-usr/share/.home.ph1/tty ! PHALANX rootkit ::
+usr/share/.home*        ! PHALANX rootkit ::
+usr/share/.home*/tty    ! PHALANX rootkit ::
 etc/host.ph1            ! PHALANX rootkit ::
 bin/host.ph1            ! PHALANX rootkit ::