Re: ChkRootkit

[marchett <marchett@vanel.lightning.eu.org>]

Cherubini Enrico wrote:

> Ciao,
> Fri, Apr 23, 2004 at 03:09:23PM +0200, marchett wrote:
>
>  
>
> > [CUT...]
> > Checking `lkm'... You have     3 process hidden for readdir command
> > You have     3 process hidden for ps command
> > Warning: Possible LKM Trojan installed
> > Checking `rexedcs'... not found
> > Checking `sniffer'... lo: not promisc and no packet sniffer sockets
> > eth0: PACKET SNIFFER(/usr/sbin/pppoe[327], /usr/sbin/pppoe[327], 
> > /usr/sbin/dhcpd[418])
> > ppp0: not promisc and no packet sniffer sockets
> > [CUT...]
> >    
>
> a me lo da se ho installato portsentry. Prova a fermarlo e a rifare il
> chkrootkit
>
>  
si se bloco bind non ci sono problemi scompaiono infatti, ma volevo 
capire perche mi tira fuori questi processi nascosti

p.s. mi hai riposto in privato, e' meglio se tutti possono leggere :P