#!/bin/bash

[0] Fix | Delete

#

[1] Fix | Delete

##

[2] Fix | Delete

# Linux Malware Detect v1.4.1

[3] Fix | Delete

# (C) 2002-2011, R-fx Networks <proj@r-fx.org>

[4] Fix | Delete

# (C) 2011, Ryan MacDonald <ryan@r-fx.org>

[5] Fix | Delete

# inotifywait (C) 2007, Rohan McGovern <rohan@mcgovern.id.au>

[6] Fix | Delete

# This program may be freely redistributed under the terms of the GNU GPL v2

[7] Fix | Delete

##

[8] Fix | Delete

#

[9] Fix | Delete

[10] Fix | Delete

logf="$userdir/event_log"

[11] Fix | Delete

wget=`which wget 2> /dev/null`

[12] Fix | Delete

if [ "$OSTYPE" == "FreeBSD" ]; then

[13] Fix | Delete

md5sum="/sbin/md5 -q"

[14] Fix | Delete

else

[15] Fix | Delete

md5sum=`which md5sum 2> /dev/null`

[16] Fix | Delete

fi

[17] Fix | Delete

[18] Fix | Delete

od=`which od 2> /dev/null`

[19] Fix | Delete

find=`which find 2> /dev/null`

[20] Fix | Delete

perl=`which perl 2> /dev/null`

[21] Fix | Delete

nice=`which nice 2> /dev/null`

[22] Fix | Delete

wc=`which wc 2> /dev/null`

[23] Fix | Delete

mail=`which mail 2> /dev/null`

[24] Fix | Delete

[25] Fix | Delete

suppress_cleanhit=$email_ignore_clean

[26] Fix | Delete

ignore_paths=$inspath/ignore_paths

[27] Fix | Delete

ignore_sigs=$inspath/ignore_sigs

[28] Fix | Delete

ignore_inotify=$inspath/ignore_inotify

[29] Fix | Delete

ignore_file_ext=$inspath/ignore_file_ext

[30] Fix | Delete

sigdir=$inspath/sigs

[31] Fix | Delete

cldir="$userdir/clean"

[32] Fix | Delete

[33] Fix | Delete

[34] Fix | Delete

def_verf=$sigdir/maldet.sigs.ver

[35] Fix | Delete

def_ver=`cat $sigdir/maldet.sigs.ver`

[36] Fix | Delete

defurl_ver=http://www.rfxn.com/downloads/maldet.sigs.ver

[37] Fix | Delete

defurl_md5hash=http://www.rfxn.com/downloads/md5.dat

[38] Fix | Delete

defurl_hex=http://www.rfxn.com/downloads/hex.dat

[39] Fix | Delete

defurl_hex_cav=http://www.rfxn.com/downloads/rfxn.ndb

[40] Fix | Delete

defurl_md5_cav=http://www.rfxn.com/downloads/rfxn.hdb

[41] Fix | Delete

defurl_cl=http://www.rfxn.com/downloads/maldet-clean.tgz

[42] Fix | Delete

[43] Fix | Delete

lmd_verf=$inspath/VERSION

[44] Fix | Delete

lmd_ver=$ver

[45] Fix | Delete

lmd_hashf=$inspath/VERSION.hash

[46] Fix | Delete

lmdurl_hash=http://www.rfxn.com/downloads/maldet.current.hash

[47] Fix | Delete

lmdurl_ver=http://www.rfxn.com/downloads/maldet.current.ver

[48] Fix | Delete

[49] Fix | Delete

[50] Fix | Delete

hexm_pl=$inspath/hexstring.pl

[51] Fix | Delete

hexmfifo_pl=$inspath/hexfifo.pl

[52] Fix | Delete

dat_md5hash=$sigdir/md5.dat

[53] Fix | Delete

dat_hexstring=$sigdir/hex.dat

[54] Fix | Delete

dat_hex_cav=$sigdir/rfxn.ndb

[55] Fix | Delete

dat_md5_cav=$sigdir/rfxn.hdb

[56] Fix | Delete

[57] Fix | Delete

tlog="$userdir/tmp/maldet/inotify/tlog"

[58] Fix | Delete

inotify=$inspath/inotify/inotifywait

[59] Fix | Delete

inotify_log="$inspath/inotify/inotify_log"

[60] Fix | Delete

inotify_trim=150000

[61] Fix | Delete

hex_fifo=$inspath/hexfifo

[62] Fix | Delete

pubuser_minuid=10

[63] Fix | Delete

[64] Fix | Delete