I was looking around WHM this morning and the "Quick Security Scan" and 'Scan for Torjan Horses" looked interesting so the Quck sercurity scan did not work at all could not stop any of the services so I tried Scanning for trojans and I came up with this, I am pretty sure the lwp* are Ensim copy scripts but the GET, HEAD etc I have no clue what they are.

Appears Clean



/dev/core



Scanning for Trojan Horses.....
.
.
.
.
.
.
.
.
.
.
.

Possible Trojan - /usr/bin/GET
.

Possible Trojan - /usr/bin/HEAD
.

Possible Trojan - /usr/bin/POST
.

Possible Trojan - /usr/bin/lwp-download
.

Possible Trojan - /usr/bin/lwp-mirror
.

Possible Trojan - /usr/bin/lwp-request
.

Possible Trojan - /usr/bin/lwp-rget
.

i allready scan my server and i found 7 trojan :

---------------------
.

Possible Trojan - /usr/bin/GET
.

Possible Trojan - /usr/bin/HEAD
.

Possible Trojan - /usr/bin/POST
.

Possible Trojan - /usr/bin/lwp-download
.

Possible Trojan - /usr/bin/lwp-mirror
.

Possible Trojan - /usr/bin/lwp-request
.

Possible Trojan - /usr/bin/lwp-rget
.

.
.
7 POSSIBLE Trojans Detected

-----------------------------------------

how can we delet it please?

thank you

Thats what I am getting on my server, I just ran the virus scan too, how can we delete the viruses?

NOTE the words: POSSIBLE trojan

I suspect that these are normal programs if most people are getting that message. Maybe something who knows can answer this one. I believe I got the same messages too when I first got my server.

COOL, Erwin. I like your, avatar by the way, its cool.