[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] chkrootkit results on Raq4r



On Fri, 12 Jul 2002, Goade, Matthew wrote:

>
> Hello. I have recently inherited a Raq4r, this is my first experience on a Cobalt of any kind. When I run chkrootkit 0.36 I get:
> Checking `lkm'... You have     5 process hidden for readdir command
> You have     6 process hidden for ps command
> Warning: Possible LKM Trojan installed
>
> Is this normal for a Raq4r???
> Thank you,
>

Not an answer to your question, but run a resore cd on your 'inherited'
RAQ. You have no idea what might be on there.

--
Gerald Waugh