[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Possible LKM Trojan installed



Bonjour,

je suis en kernel 2.6.7-1-k7 quand je lance chkrootkit voila ce que j'obtiens en réponse, dois je le prendre au serieux ou non??

Checking `lkm'... You have    10 process hidden for readdir command
You have    10 process hidden for ps command
Warning: Possible LKM Trojan installed

en detail: chkrootkit -x lkm

ROOTDIR is `/'
###
### Output of: ./chkproc -v -v
###
PID  2914: not in readdir output
PID  2914: not in ps output
CWD  2914: /home/ludo
EXE  2914: /usr/bin/nautilus
PID  2917: not in readdir output
PID  2917: not in ps output
CWD  2917: /home/ludo
EXE  2917: /usr/lib/gnome-vfs2/gnome-vfs-daemon
PID  2934: not in readdir output
PID  2934: not in ps output
CWD  2934: /home/ludo
EXE  2934: /usr/bin/nautilus
PID  2935: not in readdir output
PID  2935: not in ps output
CWD  2935: /home/ludo
EXE  2935: /usr/bin/nautilus
PID  2950: not in readdir output
PID  2950: not in ps output
CWD  2950: /home/ludo
EXE  2950: /usr/lib/gnome-applets/gweather-applet-2
PID  2967: not in readdir output
PID  2967: not in ps output
CWD  2967: /home/ludo
EXE  2967: /usr/lib/gnome-applets/gweather-applet-2
PID  3019: not in readdir output
PID  3019: not in ps output
CWD  3019: /home/ludo
EXE  3019: /usr/bin/gnome-terminal
PID  4020: not in readdir output
PID  4020: not in ps output
CWD  4020: /home/ludo
EXE  4020: /usr/lib/mozilla/mozilla-bin
PID  4021: not in readdir output
PID  4021: not in ps output
CWD  4021: /home/ludo
EXE  4021: /usr/lib/mozilla/mozilla-bin
PID  9084: not in readdir output
PID  9084: not in ps output
CWD  9084: /home/ludo
EXE  9084: /usr/bin/nautilus
You have    10 process hidden for readdir command
You have    10 process hidden for ps command

La compararison des numéros de processus avec la commande :

cat /proc/N° de processus/status | grep Name

me donne la même chose.




Reply to: