[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-users] Chkrootkit
- Subject: RE: [cobalt-users] Chkrootkit
- From: David Etheridge <DavidE@xxxxxxxxxxxx>
- Date: Tue Mar 6 07:57:26 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
SNAP! Same here!
Mine seems to vary from 1 to 2 hidden processes. Seems to have been since
installing OS Update 4 but that could be a coincidence. Touch wood so far
I've seen no other abnormalities. Being a Linux Kernel Module Trojan it is
pretty damn hard to detect changes and what they are doing and when. Crossed
fingers!
Dave Etheridge
-----Original Message-----
From: Gilles Dumangin [mailto:gilles_dumangin@xxxxxxxxxxx]
Sent: 06 March 2001 12:50
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: [cobalt-users] Chkrootkit
I have this when running chkrookit... what does it mean?
Checking `lkm'... You have 1 process hidden for readdir command
You have 1 process hidden for ps command
Warning: Possible LKM Trojan installed
Gilles
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users