Re: [cobalt-users] Chrootkit: hidden processes

[René Mølsted <molsted@xxxxxxx>]

On 11/2-2004, at 8.19, Arthur Sherman wrote:
> i get following lines in chrootkit output:
> Checking `lkm'... You have 1 process hidden for readdir command You 
> have 1
> process hidden for ps command
> Warning: Possible LKM Trojan installed
> How could i manage this?
> Thank you
> Arthur Sherman

Try running it manually:
./chkrootkit -x lkm
You should see something like this:
###
### Output of: ./chkproc -v
###

René