[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] [raq 4] possible LKM Trojan installed
- Subject: [cobalt-security] [raq 4] possible LKM Trojan installed
- From: "Sean Chester" <seanc@xxxxxxxxxxxxxxxxxxxxxx>
- Date: Wed, 17 Jul 2002 09:28:43 +0100
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
I ran chkrootkit-0.35 on my RaQ4.
All looked OK except the following..
Checking `bindshell'... not infected
Checking `lkm'... You have 2 process hidden for readdir command
You have 2 process hidden for ps command
Warning: Possible LKM Trojan installed
Checking `rexedcs'... not found
Is there anything that can cause a false reading.. Or have I been
rooted?