[cobalt-users] Chkrootkit Showing "lkm" After Update

[Scott F <scott_falco@xxxxxxxxx>]

Okay, now I'm really getting pissed! After spending
the last day patching back up box after this fresh OS
restore (RaQ4i) - I turned off Portsentry, took down
the firewall and installed a fresh copy of chkrootkit
to check things out.. 

Lookie (or is that looky):

Checking `lkm'... Warning: Possible LKM Trojan
installed.

RackShack is about to get this one back! I wonder if
it has anything to do with the update and that 

modprobe: can't locate module char-major-4

error I've seen in the logs..? Well, they'll be taking
it back down, that's all I got to say... They REALLY
should think twice about putting those boxes back-up
(on-line) with Telnet turned on since they don't plug
(install) the patch before they turn it lose to the
wild.. So sorry boys/gals at RS, you're getting it
back again..!

Cheers!
Scott

__________________________________________________
Do You Yahoo!?
Get email alerts & NEW webcam video instant messaging with Yahoo! Messenger
http://im.yahoo.com