[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] chkrootkit
- Subject: [cobalt-users] chkrootkit
- From: Ryan Howe <ryan@xxxxxxxxxx>
- Date: Mon Feb 24 13:29:02 2003
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
Is this bad to get this when running chkrootkit? :)
Checking `lkm'... You have 1 process hidden for readdir command
You have 1 process hidden for ps command
Warning: Possible LKM Trojan installed
Checking `rexedcs'... not found
Checking `sniffer'...
eth0 is not promisc
Checking `wted'... nothing deleted
Checking `scalper'... not infected
Checking `slapper'... Warning: Possible Slapper Worm installed
Checking `z2'... user kvken deleted or never loged from lastlog!
user mull deleted or never loged from lastlog!
Should we dump this box and os restore it?
Thanks Ryan