Re: Hoax: Re: What up with www.debian.org ?
On Fri, Nov 21, 2003 at 02:39:10AM -0800, Tom wrote:
> On Fri, Nov 21, 2003 at 03:52:43PM +0530, Raghavendra Bhat wrote:
> > Tom posts:
> >
> > >> deinstalled due to missing dependencies, but the 2nd time through
> > >> they work. (This time, it was most of the qt3*-dev and gtk2*-dev and
> > >> relateds.)
> >
> > When did you notice this ?
> >
> > When I installed the procps of `sid' v3.x.x, chkrootkit was informing
> > that I had a LKM worm but disappeared when downgraded. Some say that
> > procps masks certain threads. I really wonder what is up, because now
> > chkrootkit does not complain about masked threads on ps (procps v3.x.x,
> > which I put in again).
> >
> > I have removed all my devel packages and chkrootkit as well.
>
> Christ, now I'm really getting scared:
> chkrootkit reports:
> Checking `lkm'... You have 4 process hidden for ps command
> Warning: Possible LKM Trojan installed
>
> I'm running SID. What's this mean?
Nah, google groups sez this is bogus.
http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=utf-8&threadm=3d9c250c.0311132131.7dae9e79%40posting.google.com&rnum=2&prev=/groups%3Fq%3D%2522possible%2Blkm%2Btrojan%2522%26hl%3Den%26lr%3D%26ie%3DUTF-8%26oe%3Dutf-8%26selm%3D3d9c250c.0311132131.7dae9e79%2540posting.google.com%26rnum%3D2
Something to do with Debian.
Reply to: