[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-users] chkrootkit
- Subject: RE: [cobalt-users] chkrootkit
- From: "Michael D. Bathrick" <prez@xxxxxxxxxxxxx>
- Date: Mon Feb 24 16:37:01 2003
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
I would.
-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Ryan Howe
Sent: Monday, February 24, 2003 4:29 PM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: [cobalt-users] chkrootkit
Is this bad to get this when running chkrootkit? :)
Checking `lkm'... You have 1 process hidden for readdir command
You have 1 process hidden for ps command
Warning: Possible LKM Trojan installed
Checking `rexedcs'... not found
Checking `sniffer'...
eth0 is not promisc
Checking `wted'... nothing deleted
Checking `scalper'... not infected
Checking `slapper'... Warning: Possible Slapper Worm installed
Checking `z2'... user kvken deleted or never loged from lastlog!
user mull deleted or never loged from lastlog!
Should we dump this box and os restore it?
Thanks Ryan
_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users