RE: [cobalt-users] Possible LDP Worm...

[Bob G7 <Bob_G7@xxxxxxxxxx>]

> On Mon, 29 Jul 2002, Jordan Sharples wrote:
>
> > I checked in the archives and only 8 indirect hits. Installed
> ChkrootKit V
> > pre-0.36 and I have the normal errors in the log file but I
> cannot find any
> > information on this reported error:
> >
> > "Searching for LPD Worm files and dirs... Possible LPD worm installed"
> >
> > It's a Raq4 with all the updates and I have logged out and back in again
> > (got rid of the 'lkm' message) but I have not rebooted the machine.
> >
> > Do I need some upgrades/patches? Let me know what you think.
> >
> look at this and check your system
> http://cert.uni-stuttgart.de/archive/usenet/comp.os.linux.security
> /2002/03/msg00084.html
> Do you have a file on your sys "epsilon"?
> find / -name epsilon
>
I read somewhere that chkrootkit can on rare occasions give a false
positive. I would suggest running chkrootkit again and see if it's still
reporting the same thing.