Re: My machine compromised?

["Brian P.D. Smyth" <bpdsmyth@charter.net>]

On Wed, 2003-12-03 at 03:03, Vanh Phom wrote:
> Hi folk,
> After reading on report of servers compromised. Just for curiorsity I
> run chkrootkit on my own machine and come up with this result:
> 
> Searching for anomalies in shell history files... nothing found
> Checking `asp'... not infected
> Checking `bindshell'... not infected
> Checking `lkm'... You have    12 process hidden for readdir command
> You have    12 process hidden for ps command
> Warning: Possible LKM Trojan installed
> Checking `rexedcs'... not found
> Checking `sniffer'... 
> eth0: PROMISC
> 
> Is my machine compromised? How to fix this?
> 
> Vanh
> 
Vanh,

Try this link:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=217525

Regards,
Brian