Re: Possible LKM Trojan , Need Help

[Florian Ernst <florian@uni-hd.de>]

Hello Thomas!

On Sat, Nov 29, 2003 at 05:49:31AM -0500, Thomas H. George wrote:
> chkrootkit reported possible LKM Trojan.  4 processes hidden for ps command.

Wow, hold on, first check
chkrootkit -x lkm
and see whether the report only contains PID 3-6. If so then it's only
a bug, see
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=217278
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=217525

Cheers,
Flo

Attachment: pgpkDo_4PjYZo.pgp
Description: PGP signature