The files listed here were found in some infected/owned machines. They are not part of any rootkit, but some “crackers” use them. They can be a log of some sniffer, a sniffer or a lot of other things.
Take a careful look if you find any of these files in your system.
N/A
N/A
OSSECetc/rc.d/init.d/rc.moduleslib/ldd.sousr/man/muieusr/X11R6/include/painusr/bin/sourcemaskusr/bin/ras2xmusr/bin/ddcusr/bin/jdcusr/sbin/in.telnetsbin/vobiscumusr/sbin/jcdusr/sbin/atd2usr/bin/ishitusr/bin/.etcusr/bin/xstatvar/run/.tmpusr/man/man1/lib/.libusr/man/man2/.man8var/run/.pidlib/.solib/.fxlib/lblip.tkusr/lib/.fxvar/local/.lpddev/rd/cdbdev/.rd/usr/lib/pt07usr/bin/atmtmp/.cheesedev/.arcticdev/.xmandev/srd0dev/ptyzxdev/ptyzgdev/xdf1dev/ttyopdev/ttyofdev/hd5dev/hd6dev/hd7dev/hdx1dev/hdx2dev/xdf2dev/ptypdev/ptyr*/.src*last.cgi*nobody.cgi*void.cgi*all4one.cgi*xntps*/.xman*/.arctic*psybnc*mech.session*sshduNote
All files with an “*” need to be search in all system