Re: chkroot warning

From: Chris (cpollock_at_earthlink.net)
Date: 08/06/04

  • Next message: rsina: "Re: chkroot warning"
    Date: Fri, 06 Aug 2004 03:01:46 GMT
    
    

    rsina wrote:

    > Hi all, I've got the following warning in chkroot. Could someone please
    > let me know what it means and what should be my next step:
    >
    > [snip]
    > Checking `lkm'... You have 11 process hidden for readdir command
    > You have 11 process hidden for ps command
    > Warning: Possible LKM Trojan installed
    > [snip]
    >
    > Thanks
    > suse9.1

    This is from the Mandrake list, but it also pertains to the lkm trojan,
    might be of some help. Just follow the threads by going to the bottom of
    the message and select "next in thread"

    http://marc.theaimsgroup.com/?l=mandrake-newbie&m=109155959631981&w=2

    HTH

    -- 
    Chris
    Registered Linux User 283774 http://counter.li.org
    10:00pm up 1 day, 2:20, 2 users, load average: 0.89, 0.99, 1.04
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    "I'll rob that rich person and give it to some poor deserving slob.
    That will *prove* I'm Robin Hood."
                    -- Daffy Duck, "Robin Hood Daffy", [1958, Chuck Jones]
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    

  • Next message: rsina: "Re: chkroot warning"

    Relevant Pages

    • Re: LKM Trojan (david walcroft)
      ... You have 2 process hidden for readdir command ... Warning: Possible LKM Trojan installed ...
      (Fedora)
    • lkm trojan
      ... I just ran chkrootkit on one of my machines at it turned up the ... You have 4 process hidden for ps command ... Warning: Possible LKM Trojan installed ... How do I diagnose this further, and if there is an LKM trojan, how do I ...
      (Debian-User)
    • Re: chkrootkit and vncserver
      ... > This morning's normal system checks triggered alarms. ... > You have 5 process hidden for ps command ... > Warning: Possible LKM Trojan installed ...
      (Fedora)
    • Re: chkrootkit...lkm trojan?... only from gnome
      ... > Warning: Possible LKM Trojan installed ... > But when I run chkrootkit from KDE it comes up clean. ... start reporting 17+ 'hidden processes' and a possible LKM Trojan on my ...
      (Debian-User)
    • Re: chkrootkit
      ... but I remember seeing that exact warning from a fairly ... recently built box with a fairly new kernel on it and then doing some ... few warnings like that LKM Trojan warning because of some setting I ... Double check the results with system commands, ...
      (Debian-User)