[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

RE: chkrootkit and lkm

Le mer 26/11/2003 à 01:17, Michael Bordignon a écrit :
> > I was just running 'chkrootkit' and came across this warning:
> > 
> > > Checking `lkm'... You have     4 process hidden for ps command
> > > Warning: Possible LKM Trojan installed
> I have the same problem.. I believe it's a bug in chkrootkit

Do you stop the services before running chkrootkit?

It can append that chkrootkit report false positive on machine still
running services. I had the experience with exim. When I stop it I had
no false positive...
> Michael

Reply to: