[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] LKM Trojan..

I had the same problem, and it appeared to be connected to an infected
/sbin/ifconfig file. I grabbed the net-tools rpm from ftp.cobaltnet.com and
re-installed it (thus overwriting the ifconfig file) and the lkm trojan was
no longer detected.

Cheers...
Roger

----- Original Message -----
From: "Craig Napier" <craignapier@xxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Friday, February 16, 2001 11:52 AM
Subject: [cobalt-users] LKM Trojan..


> How do you remove a LKM Trojan..?
>
> Checking `lkm'... You have     1 process hidden for readdir command
> You have     1 process hidden for ps command
> Warning: Possible LKM Trojan installed
>
>
> _________________________________________________________________
> Get your FREE download of MSN Explorer at http://explorer.msn.com
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users