-# @(#) $Id$
+# @(#) $Id: ./src/rootcheck/db/rootkit_trojans.txt, 2012/04/26 dcid Exp $
+
#
# rootkit_trojans.txt, (C) Daniel B. Cid
# Imported from the rootcheck project.
in.telnetd !cterm100|vt350|VT100|ansi-term|bash|^/bin/sh|/dev[A-R]|/dev/[a-z]/!
in.fingerd !bash|^/bin/sh|cterm100|/dev/!
identd !bash|^/bin/sh|file\.h|proc\.h|/dev/[^n]|^/bin/.*sh!
-init !bash|/dev/h|HOME!
+init !bash|/dev/h
tcpd !bash|proc\.h|p1r0c4|hack|/dev/[^n]!
rlogin !p1r0c4|r00t|bash|/dev/[^nt]!
# Rootkit entries
-/sbin/init !HOME! Suckit rootkit
-/proc/1/maps !init.! Suckit rootkit
/etc/rc.d/rc.sysinit !enyelkmHIDE! enye-sec Rootkit