Re: Chkrootkit - true/false ?

To: David Ross <david@zdata.co.za>
Cc: debian-isp@lists.debian.org
Subject: Re: Chkrootkit - true/false ?
From: Myke Place <mp@xmission.com>
Date: Fri, 21 May 2004 12:07:20 -0600
Message-id: <[🔎] 20040521180720.GA12931@xmission.com>
Mail-followup-to: David Ross <david@zdata.co.za>, debian-isp@lists.debian.org
In-reply-to: <[🔎] 05C8155485DB894FAEDD9249BCE5A51E0E7477@Exch2003.mrdb.local>
References: <[🔎] 05C8155485DB894FAEDD9249BCE5A51E0E7477@Exch2003.mrdb.local>

* David Ross (david@zdata.co.za) [040521 01:55] spake thusly:

<snip>

> Checking `lkm'... You have     3 process hidden for readdir command
> You have     3 process hidden for ps command
> Warning: Possible LKM Trojan installed
> 
> Sometimes chkrootkit returns nothing detected and every time rkhunter
> tells me nothing is wrong. Is this a false positive with chkrootkit and
> debian woody?

Running 2.6?

-mp

Reply to:

Follow-Ups:
- Re: Chkrootkit - true/false ?
  - From: "Jason Lim" <maillist@jasonlim.com>

References:
- Chkrootkit - true/false ?
  - From: "David Ross" <david@zdata.co.za>

Prev by Date: Re: Chkrootkit - true/false ?
Next by Date: Re: multiple IP addresses cause ZONE TRANSFER to fail.
Previous by thread: Re: Chkrootkit - true/false ?
Next by thread: Re: Chkrootkit - true/false ?
Index(es):
- Date
- Thread