Possible LKM Trojan installed
Bonjour,
je suis en kernel 2.6.7-1-k7 quand je lance chkrootkit voila ce que
j'obtiens en réponse, dois je le prendre au serieux ou non??
Checking `lkm'... You have 10 process hidden for readdir command
You have 10 process hidden for ps command
Warning: Possible LKM Trojan installed
en detail: chkrootkit -x lkm
ROOTDIR is `/'
###
### Output of: ./chkproc -v -v
###
PID 2914: not in readdir output
PID 2914: not in ps output
CWD 2914: /home/ludo
EXE 2914: /usr/bin/nautilus
PID 2917: not in readdir output
PID 2917: not in ps output
CWD 2917: /home/ludo
EXE 2917: /usr/lib/gnome-vfs2/gnome-vfs-daemon
PID 2934: not in readdir output
PID 2934: not in ps output
CWD 2934: /home/ludo
EXE 2934: /usr/bin/nautilus
PID 2935: not in readdir output
PID 2935: not in ps output
CWD 2935: /home/ludo
EXE 2935: /usr/bin/nautilus
PID 2950: not in readdir output
PID 2950: not in ps output
CWD 2950: /home/ludo
EXE 2950: /usr/lib/gnome-applets/gweather-applet-2
PID 2967: not in readdir output
PID 2967: not in ps output
CWD 2967: /home/ludo
EXE 2967: /usr/lib/gnome-applets/gweather-applet-2
PID 3019: not in readdir output
PID 3019: not in ps output
CWD 3019: /home/ludo
EXE 3019: /usr/bin/gnome-terminal
PID 4020: not in readdir output
PID 4020: not in ps output
CWD 4020: /home/ludo
EXE 4020: /usr/lib/mozilla/mozilla-bin
PID 4021: not in readdir output
PID 4021: not in ps output
CWD 4021: /home/ludo
EXE 4021: /usr/lib/mozilla/mozilla-bin
PID 9084: not in readdir output
PID 9084: not in ps output
CWD 9084: /home/ludo
EXE 9084: /usr/bin/nautilus
You have 10 process hidden for readdir command
You have 10 process hidden for ps command
La compararison des numéros de processus avec la commande :
cat /proc/N° de processus/status | grep Name
me donne la même chose.
Reply to: