All,

I just ran chkrootkit on my Raq 4, and it said this:

Checking `lkm'... You have     1 process hidden for readdir command
You have     1 process hidden for ps command
Warning: Possible LKM Trojan installed

Is this a real trojan on my system? (LKM means Loadable Kernel Module)
Has a hacker loaded a kernel module? How can I see this module?

I do have portsentry running in the background, if that is important
here. False positive?

Should I be worried and if so what can I do to remove it?

Herb

-- 
Herb Rubin                 Pathfinders Software
[EMAIL PROTECTED]         http://www.pfinders.com
phone: 650-692-9220        fax:   650-692-9250

_______________________________________________
cobalt-developers mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-developers

Reply via email to