Re: [cobalt-users] chkrootkit

[Jeroen Wunnink <jeroen@xxxxxxxxxxxxxx>]

Tends to be a mysql or httpd process that is stuck, usually there's nothing 
wrong when this message passes by, try running chkrootkit again a few 
times, you'll see it being reported or ignored at random..

At 07:19 AM 8/21/2003 +0200, you wrote:
> Hi guys
> I just had Michael Stauber installing his security package on one of our 
> RaQ550s. When it runs chkrootkit I get this report:
> +Checking `lkm'... You have     1 process hidden for ps command
> +Warning: Possible LKM Trojan installed
>
> Is that serious and what do I do to get rid of it?
>
> Thanks,
> René Mølsted
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users



Met vriendelijke groet,

Jeroen Wunnink,
EasyHosting B.V. Systeembeheerder
systeembeheer@xxxxxxxxxxxxxx

telefoon:+31 (035) 6285455              Postbus 1332
fax: +31 (035) 6838242                  1200 BH Hilversum

http://www.easyhosting.nl