X__text__TEXTh__data__DATA __const__TEXT __cstring__TEXT ] __picsymbolstub2__TEXT= 8`__la_sym_ptr2__DATA @8__nl_symbol_ptr__DATA __textcoal_nt__TEXT @< $ P!US48t DžYED$ D$D$$e D$$4 t Dž Dž4[]USTaEq 8tDžD$$ u DžvD $s u DžWED$ J D$D$$ $- uE$ ET[]ÐUSD 8t DžYED$dD$ sD$D$$ $y t Dž DžD[]US EEEEEEEEEEE Eȃ}E;E EEEEEEEEEEED$Ẻ$E u " 8uEẺ$ u 8uEẺ$ u 8uEẺ$.E؋Ẻ$EԋẺ$2EЃ}u#}u}u}u}u }uE;EuE8~;D$D$$ D$$]E8tNẺD$ED$ VD$D$$ E$|uE$L}t#}t}t}t}t }tẺ$|u 8uED$Ẻ$u `8uEẺ$u =8uEẺ$E؋Ẻ$EԋẺ$EЃ}u#}u}u}u}u }uE;EE;Eu{E;Ets}u}u}u }uED$ED$ẺD$ qD$D$$D$$ EtE;EuE;Eu E;Eus}u}u}u }u=ED$ED$ẺD$ D$D$$D$$EE;EuE;Eu E;Eui 8Ẻ$ẺD$ 1 D$D$$ D$$Ed}t^}tX}uRẺ$uCẺD$ q D$D$$D$$EẼ-Ą []UStEEBfsPDžD$D$$D${D$$Z$_u9D$D$$($-uƅ$t $tED$ ED$D$$z}uGED$D$ D$D$$D$$t[]  !"#$%&'*+,:;<=>?[\]^`{|}~%d/proc/proc/%d%s/%dExcessive number of hidden processes. It maybe a false-positive or something really bad is going on.%s -p %d > /dev/null 2>&1Process '%d' hidden from kill (%d) or getsid (%d). Possible kernel-level rootkit.Process '%d' hidden from kill (%d), getsid (%d) or getpgid. Possible kernel-level rootkit.Process '%d' hidden from /proc. Possible kernel level rootkit.Process '%d' hidden from ps. Possible trojaned version installed./proc/1/bin/ps/usr/bin/psNo hidden process by Kernel-level rootkits. %s is not trojaned. Analyzed %d processes.⍀Pv⍀vPa⍀aPxsL⍀LP_Z7⍀7PFA"⍀"P-( ⍀ P⍀P⍀P⍀P⍀P⍀P⍀P~yz⍀zPe`e⍀ePLGP⍀PP3J c |  + D ] v $Ë$ OTOJ8 O OOx O_ OK "  @ wa6  y vl8! e  ZL>%]    { Q8*   cQ K1      ~  x s  m e _ Z  T L F A  ; n 3 n - (  " U  U     <  <  # #     ~ y  s k e `  Z R L G  A t 9 t 3 .  ( [ [     B  B  <840,($  dd<DDDD(DOD!kD#wD$ $9DO$D+D,D0D1D3D5D8D9D;D<.D>@DBGDDUDE^$+* ,-".,-^.$DLpDODPDRDTDVDYDZ/$Lp@KKMZ[\$DaDbDcDdDe$Df+Dg2Dh9Di@DjGDkNDmUDr\DvdDyzD{D|D}D~DDDDDDDDDD DD0D7DEDSDaDDDDDDDDDDDD)D0D<D`DeDDDDDDDDDD$D)DEDbD D DDDD$D:DED#_D&D(D)D,D/D2D6D7&Dt,D;7]$ax`` ``r&bc,d9eFfSg`hki|jkmnpb@%1  /@$@DB@DCODDVDH]DIvDKDMDPDQDRDTDUDV'D[.D]RD``DbDeDhDl$B@%C2D@FIHiIKOd$ & >&O_ q T q (  % 9 g   d J@;$0pDYdk3S<[sM(rg@ _proc_read___i686.get_pc_thunk.bx_proc_chdir_proc_stat_loop_all_pids_check_rc_pids___local_name_rootcheck_rk_sys_file_rk_sys_name_rk_sys_count_total_ports_udp_total_ports_tcp_noproc___i686.get_pc_thunk.axdyld_stub_binding_helper_strncpy_memset_check_rc_readproc_sleep_system_notify_rk_getpgid_getsid___error_kill_getpid_is_file_chdir_getcwd_isfile_ondir_snprintf/mnt/gmirror/ports/security/ossec-hids-server/work/ossec-hids-1.3/src/rootcheck/check_rc_pids.cgcc2_compiled._hostname_mapproc_read:F(0,1)=r(0,1);-2147483648;2147483647;int:t(0,1)pid:p(0,1)dir:(0,2)=ar(0,3)=r(0,3);0000000000000;0037777777777;;0;1024;(0,4)=r(0,4);0;127;long unsigned int:t(0,5)=r(0,5);0000000000000;0037777777777;char:t(0,4)proc_chdir:F(0,1)pid:p(0,1)ret:(0,1)curr_dir:(0,2)dir:(0,2)proc_stat:F(0,1)pid:p(0,1)proc_dir:(0,2)loop_all_pids:F(0,6)=(0,6)void:t(0,6)ps:p(0,7)=*(0,4)max_pid:p(0,8)=(0,9)=(0,10)=(0,1)_errors:p(0,11)=*(0,1)_total:p(0,11)pid_t:t(0,8)__darwin_pid_t:t(0,9)__int32_t:t(0,10)_kill0:(0,1)_kill1:(0,1)_gsid0:(0,1)_gsid1:(0,1)_gpid0:(0,1)_gpid1:(0,1)_ps0:(0,1)_proc_stat:(0,1)_proc_read:(0,1)_proc_chdir:(0,1)i:(0,8)my_pid:(0,8)command:(0,2)op_msg:(0,2)op_msg:(0,2)op_msg:(0,2)op_msg:(0,2)op_msg:(0,2)check_rc_pids:F(0,6)_total:(0,1)_errors:(0,1)ps:(0,2)proc_0:(0,12)=ar(0,3);0;5;(0,4)proc_1:(0,13)=ar(0,3);0;7;(0,4)max_pid:(0,8)op_msg:(0,2)__local_name:G(0,7)hostname_map:S(0,14)=ar(0,3);0;255;(0,15)=k(0,16)=@s8;r(0,16);0;255;unsigned char:t(0,16)rootcheck:G(0,17)=(0,18)=xs_rkconfig:rkconfig:t(0,17)_rkconfig:T(0,18)=s60workdir:(0,7),0,32;basedir:(0,7),32,32;rootkit_files:(0,7),64,32;rootkit_trojans:(0,7),96,32;winaudit:(0,7),128,32;winmalware:(0,7),160,32;winapps:(0,7),192,32;fp:(0,19)=*(0,20)=(0,21)=xs__sFILE:,224,32;daemon:(0,1),256,32;notify:(0,1),288,32;scanall:(0,1),320,32;readall:(0,1),352,32;disabled:(0,1),384,32;time:(0,1),416,32;queue:(0,1),448,32;;FILE:t(0,20)__sFILE:T(0,21)=s88_p:(0,22)=*(0,16),0,32;_r:(0,1),32,32;_w:(0,1),64,32;_flags:(0,23)=@s16;r(0,23);-32768;32767;,96,16;_file:(0,23),112,16;_bf:(0,24)=xs__sbuf:,128,64;_lbfsize:(0,1),192,32;_cookie:(0,25)=*(0,6),224,32;_close:(0,26)=*(0,27)=f(0,1),256,32;_read:(0,28)=*(0,29)=f(0,1),288,32;_seek:(0,30)=*(0,31)=f(0,32)=(0,33)=(0,34)=(0,35)=@s64;r(0,35);01000000000000000000000;0777777777777777777777;,320,32;_write:(0,36)=*(0,37)=f(0,1),352,32;_ub:(0,24),384,64;_extra:(0,38)=*(0,39)=xs__sFILEX:,448,32;_ur:(0,1),480,32;_ubuf:(0,40)=ar(0,3);0;2;(0,16),512,24;_nbuf:(0,41)=ar(0,3);0;0;(0,16),536,8;_lb:(0,24),544,64;_blksize:(0,1),608,32;_offset:(0,32),640,64;;short int:t(0,23)__sbuf:T(0,24)=s8_base:(0,22),0,32;_size:(0,1),32,32;;fpos_t:t(0,32)__darwin_off_t:t(0,33)__int64_t:t(0,34)long long int:t(0,35)rk_sys_file:G(0,42)=*(0,7)rk_sys_name:G(0,42)rk_sys_count:G(0,1)total_ports_udp:G(0,43)=ar(0,3);0;65535;(0,4)total_ports_tcp:G(0,43)noproc:G(0,1)