[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] CHkrootkit output



> thx LOL
> ----- Original Message -----
> From: "William J.A. Brillinger" <billy@xxxxxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Sent: Sunday, April 18, 2004 1:55 PM
> Subject: Re: [cobalt-users] CHkrootkit output
>
>
> > At 01:45 PM 18/04/2004 +0200, you wrote:
> > >Today i noticed this in my report from chkrootkit.
> > >
> > >Checking `sniffer'... /proc/5/fd: Permission denied
> > >
> > >This wasnt there in the older version i was using.... can someone shed
> tom
> > >lit on it....
> >
> > OH! Me, I know this one! Let me answer it!
> >
> > Your RAQ doesn't have a floppy - so no permission to read the floppy ;)
> >
> > - Bill B.
> >
> >
> >
> > ---------------------------------
> > William J.A. Brillinger
> > Precision Design Co.

I believe that machine has been hacked. Is cron doing weird stuff? Other
processes like devine?

  David Hahn
  PageKeeper Service
  1512 Deborah Road #102
  Rio Rancho, New Mexico 87124 US
  505-892-8723
  http://www.pagekeeperservice.com