Re: My machine compromised?
In article <[🔎] 1070442213.1327.7.camel@debian>,
Vanh Phom <vphom@comcast.net> wrote:
>Hi folk,
>After reading on report of servers compromised. Just for curiorsity I
>run chkrootkit on my own machine and come up with this result:
>
>Searching for anomalies in shell history files... nothing found
>Checking `asp'... not infected
>Checking `bindshell'... not infected
>Checking `lkm'... You have 12 process hidden for readdir command
>You have 12 process hidden for ps command
Bet you're running a 2.6 kernel. See http://bugs.debian.org/chkrootkit
Mike.
Reply to: