chkrootkit found lkm trojan ?
I got the following output from chkrootkit but couldn't find any
explenation on what processes don't appear:
Checking `lkm'... You have 4 process hidden for ps command
Warning: Possible LKM Trojan installed
How do I check this?
I also got:
Checking `wted'... 1 deletion(s) between Tue Oct 7 01:50:13 2003 and
Tue Oct 7 20:35:04 2003
3 deletion(s) between Sun Oct 19 03:28:06 2003 and Sun Oct 19 12:34:28
2003
2 deletion(s) between Mon Oct 27 11:24:33 2003 and Mon Oct 27 11:26:26
2003
3 deletion(s) between Mon Oct 27 11:47:15 2003 and Wed Mar 28 22:05:08
2029
2 deletion(s) between Mon Oct 28 02:42:27 2030 and Mon Oct 27 13:34:04
2003
nothing deleted
I have reiserfs and had quite a few crashes lately due to some problem
with my instellation. Any ideas?
--
Micha Feigin
michf@math.tau.ac.il
Reply to: