[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

chkrootkit found lkm trojan ?



I got the following output from chkrootkit but couldn't find any
explenation on what processes don't appear:

Checking `lkm'... You have     4 process hidden for ps command
Warning: Possible LKM Trojan installed

How do I check this?

I also got:
Checking `wted'... 1 deletion(s) between Tue Oct  7 01:50:13 2003 and
Tue Oct  7 20:35:04 2003
3 deletion(s) between Sun Oct 19 03:28:06 2003 and Sun Oct 19 12:34:28
2003
2 deletion(s) between Mon Oct 27 11:24:33 2003 and Mon Oct 27 11:26:26
2003
3 deletion(s) between Mon Oct 27 11:47:15 2003 and Wed Mar 28 22:05:08
2029
2 deletion(s) between Mon Oct 28 02:42:27 2030 and Mon Oct 27 13:34:04
2003
nothing deleted

I have reiserfs and had quite a few crashes lately due to some problem
with my instellation. Any ideas?
-- 
Micha Feigin
michf@math.tau.ac.il



Reply to: