Hosting Provided By

Re: LKM Trojan installed

From: Cal Peake <bugtraq(at)absolutedigital.net>
Date: Fri Feb 07 2003 - 19:27:23 EST

> While running 'chkrootkit' at my box (RH 7.3) I saw the following:

Rivanor,

I know that RH patches their ps command to hide threads. If you're running a multi-threaded process (such as coldfusion) it very well could be why you're getting this warning.

-Cal Received on Sat Feb 8 10:09:36 2003

This message: [ Message body ]
Next message: Nathan Yocom: "Re: LKM Trojan installed"
Previous message: Bruce Garlock: "Re: LKM Trojan installed"
In reply to Rivanor P. Soares: "LKM Trojan installed"
Next in thread: Dragos Ruiu: "Re: LKM Trojan installed"
Reply: Dragos Ruiu: "Re: LKM Trojan installed"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:01:19 EDT