LKM Trojan

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: For users of Fedora Core releases <fedora-list@xxxxxxxxxx>
Subject: LKM Trojan
From: david walcroft <david_walcroft@xxxxxxxxxxxx>
Date: Wed, 01 Dec 2004 10:05:14 +1000
Reply-to: For users of Fedora Core releases <fedora-list@xxxxxxxxxx>
User-agent: Mozilla Thunderbird 0.8 (X11/20041020)

Hi,
   yesterday chkrootkit logged this

Checking `lkm'...
You have     2 process hidden for readdir command
You have     2 process hidden for ps command
Warning: Possible LKM Trojan installed

Today it logs

Checking `lkm'...
You have     4 process hidden for readdir command
You have     4 process hidden for ps command
Warning: Possible LKM Trojan installed

Would these be a 'false positive' or for real and if so how do I
confirm and remove any infected process/trojan

 Thanks   david

Follow-Ups:
- Re: LKM Trojan
  - From: Pedro Fernandes Macedo

Prev by Date: Re: What happened to gqview
Next by Date: Re: xcdroast and 2.6.x kernel in user mode
Previous by thread: wireless dell keyboard and mouse
Next by thread: Re: LKM Trojan
Index(es):
- Date
- Thread

[Index of Archives] [Current Fedora Users] [Fedora Desktop] [Fedora SELinux] [Yosemite News] [Yosemite Photos] [KDE Users] [Fedora Tools] [Fedora Docs]