[Date Prev][Date Next] [Thread Prev][Thread Next] [Thread Index] [Date Index] [Author Index]

LKM Trojan

From: david walcroft <david_walcroft yahoo com au>
To: For users of Fedora Core releases <fedora-list redhat com>
Subject: LKM Trojan
Date: Wed, 01 Dec 2004 10:05:14 +1000

Hi,
   yesterday chkrootkit logged this

Checking `lkm'...
You have     2 process hidden for readdir command
You have     2 process hidden for ps command
Warning: Possible LKM Trojan installed

Today it logs

Checking `lkm'...
You have     4 process hidden for readdir command
You have     4 process hidden for ps command
Warning: Possible LKM Trojan installed

Would these be a 'false positive' or for real and if so how do I
confirm and remove any infected process/trojan

Thanks david

Follow-Ups:
- Re: LKM Trojan
  - From: Pedro Fernandes Macedo

[Date Prev][Date Next] [Thread Prev][Thread Next] [Thread Index] [Date Index] [Author Index]