[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Hoax: Re: What up with www.debian.org ?



On Fri, Nov 21, 2003 at 03:52:43PM +0530, Raghavendra Bhat wrote:
> Tom posts:
> 
> >> deinstalled  due to missing  dependencies, but  the 2nd  time through
> >> they work.  (This time, it was most of the qt3*-dev and gtk2*-dev and
> >> relateds.)
> 
> When did you notice this ? 
> 
> When I  installed the procps  of `sid' v3.x.x, chkrootkit  was informing
> that I  had a LKM worm  but disappeared when downgraded.   Some say that
> procps masks certain  threads.  I really wonder what  is up, because now
> chkrootkit does not complain about  masked threads on ps (procps v3.x.x,
> which I put in again).
> 
> I have removed all my devel packages and chkrootkit as well.

Christ, now I'm really getting scared:
chkrootkit reports:
Checking `lkm'... You have     4 process hidden for ps command
Warning: Possible LKM Trojan installed

I'm running SID.  What's this mean?



Reply to: