RE: [cobalt-users] Chrootkit: hidden processes

[Arthur Sherman <arturs@xxxxxxxxxxxxxxxx>]

I see. Thank you.

Arthur Sherman
 

> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx 
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Phil Beynon
> Sent: Wednesday, February 11, 2004 12:12
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: RE: [cobalt-users] Chrootkit: hidden processes
> 
> > Got this in output:
> >
> > [root chkrootkit-0.43]# ./chkrootkit -x lkm ROOTDIR is `/'
> > ###
> > ### Output of: ./chkproc -v -v
> > ###
> > [root chkrootkit-0.43]#
> >
> > Should I consider it's clean? So why it gives me that warning?
> >
> > Arthur Sherman
> >
> 
> It's almost certainly a false positive, I get these as well - 
> there is some discussion about it on the chkrootkit main 
> site, it is a known problem.
> 
> Phil
> 
> ** http://www.diygear.com THE Online DIY Toolstore For DIY & Business
> ** Infolink Electronic Systems Ltd. 
> http://www.infolinkelectronics.co.uk
> ** Professional Web Design & Cobalt Hosting Solutions
> ** Sun Cobalt iForce Reseller - Canon Silver Reseller
> ** Contact: Sales@xxxxxxxxxxxxxxxxxxxxxxxxx
> ** Tel / Fax 0121 458 4894 (office) 0121 441 3558 (home)
> 
> 
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>