[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] Chkrootkit - What next
- Subject: [cobalt-users] Chkrootkit - What next
- From: Revd leonard payne <vicarage@xxxxxxxxxxxxxx>
- Date: Wed Nov 7 01:58:16 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
I have been running chkrootkit 0-.32 (probably old) for some time now
each night with no unusual events until tonight
Searching for LPD Worm files and dirs... Nothing found
Searching for Ramen Worm files and dirs... Nothing found
Searching for RK17 files and dirs... Nothing found
Searching for Adore Worm... Nothing found
Searching for anomalies in shell history files... Nothing found
Checking `lkm'... You have 2 process hidden for readdir command
You have 2 process hidden for ps command
Warning: Possible LKM Trojan installed
The only change to my system is that Realserver is installed
when I ps -ax I come into the sustem as pts/1
I can't find the pts/0 ??
Any ideas folks?
Blessings
Revd Leonard