Hosting Provided By

Re: LKM Trojan installed

From: Chris Rouch <cdvr(at)pobox.com>
Date: Wed Feb 19 2003 - 08:03:10 EST

> 2) While I was running chkrootkit-0.39a:

chkrootkit seems to think that *all* your processes are hidden (assuming a couple finished between running chkrootkit and ps).

I suspect that the ps is being run with the wrong arguments (or the wrong ps is being run). Have a look at chkproc.c and make sure that the definition of PS is the one you want for your system.

Regards,

Chris Received on Wed Feb 19 11:32:21 2003

This message: [ Message body ]
Next message: Felix Cuello: "entropy + openSSL question"
Previous message: Nick Austin: "Re: LKM Trojan installed"
In reply to Rivanor P. Soares: "Re: LKM Trojan installed"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:01:20 EDT