hidden processes
From: Vlady (vlady_at_cyber2000.ca)
Date: 07/30/03
- Previous message: entmoot_at_gmx.de: "Re: Bug in chkrootkit ?"
- Next in thread: Meritt James: "Re: hidden processes"
- Reply: Meritt James: "Re: hidden processes"
- Reply: Erik Vincent: "Re: hidden processes"
- Reply: Birl: "Re: hidden processes"
- Maybe reply: Johnson, Kevin: "RE: hidden processes"
- Reply: gminick: "Re: hidden processes"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: security-basics@securityfocus.com Date: Wed, 30 Jul 2003 17:28:22 -0400
Hi,
One of my mashines is hacked and chkrootkit-0.40 tells me that I have 3
proccess hidden from "ps". All of my system binaries looks like beeing clean.
Using "netstat" I can see that there is not a lisenning servise other than the
services suppused to work on the machine.
I know that the best way to go further is to reinstall the machine but first I
would like to understand more of what have happend.
My question is how can I see this 3 hidden processes.
Cheers
Vlady
---------------------------------------------------------------------------
----------------------------------------------------------------------------
- Previous message: entmoot_at_gmx.de: "Re: Bug in chkrootkit ?"
- Next in thread: Meritt James: "Re: hidden processes"
- Reply: Meritt James: "Re: hidden processes"
- Reply: Erik Vincent: "Re: hidden processes"
- Reply: Birl: "Re: hidden processes"
- Maybe reply: Johnson, Kevin: "RE: hidden processes"
- Reply: gminick: "Re: hidden processes"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]