RE: [cobalt-users] chkrootkit results on Raq4r

["Goade, Matthew" <mgoade@xxxxxxxxxxxxxxx>]

Good point. It hosts numerous domains from paying customers. This is only my second week here, so I'm not quite familiar enough with Cobalt yet to give that a try. 

-----Original Message-----
From: gerald waugh [mailto:gwaugh@xxxxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Friday, July 12, 2002 9:08 AM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-users] chkrootkit results on Raq4r




On Fri, 12 Jul 2002, Goade, Matthew wrote:

>
> Hello. I have recently inherited a Raq4r, this is my first experience on a Cobalt of any kind. When I run chkrootkit 0.36 I get:
> Checking `lkm'... You have     5 process hidden for readdir command
> You have     6 process hidden for ps command
> Warning: Possible LKM Trojan installed
>
> Is this normal for a Raq4r???
> Thank you,
>

Not an answer to your question, but run a resore cd on your 'inherited'
RAQ. You have no idea what might be on there.

--
Gerald Waugh

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users