The Planet Forums > Warnings in chkrootkit output

Full Version: Warnings in chkrootkit output

The Planet Forums > Security > General Security > UNIX Security

unamigo

Nov 20 2005, 04:43 PM

Do you know what does this mean in my chkrootkit output email:

CODE

You have 8 process hidden for readdir command

You have 8 process hidden for ps command

chkproc: Warning: Possible LKM Trojan installed

The tty of the following user process(es) were not found

in /var/run/utmp !

! RUID PID TTY CMD

! root 2109 tty5 /sbin/mingetty tty5

! root 2114 tty6 /sbin/mingetty tty6

xenneo

Nov 20 2005, 04:57 PM

You might have a rootkit installed = Can you put the whole IP here so we can better take a look at what CHKrootkit says? Thanks.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.