Re: help remove!! i got linux torjan

[Cantona Su]

Hi,

Sorry, I still cannot find it on archive.
You mean both LKM trojan and LPD Worm are wrong detect??

Thanks

On Sat, 31 Jul 2004 04:33:28 +0200, Jerome BENOIT [EMAIL PROTECTED] wrote:
 Hello,
 
 please look into the archive:
 if I remember well, this is a bug of chkrootkit.
 
 Of course double check it !
 
 hth,
 Jerome
 
 
 
 Cantona Su wrote:
  Hi all,
 
  Here is the chkrootkit output:
 
  Checking `lkm'... You have 6 process hidden for readdir command
  You have 6 process hidden for ps command
  Warning: Possible LKM Trojan installed
  Searching for LPD Worm files and dirs... Possible LPD worm installed
 
  Can someone help me with  remove them please!!
 
  Thanks!!
 
 
 
 
 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
 



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: help remove!! i got linux torjan

[Florian Ernst]

Hello!

On Sat, Jul 31, 2004 at 04:07:24PM +0800, Cantona Su wrote:
 Sorry, I still cannot find it on archive.

See /usr/share/doc/chkrootkit/README.Debian and
http://bugs.debian.org/chkrootkit.

 You mean both LKM trojan and LPD Worm are wrong detect??

Might be. Do you have bitlbee installed - LPD false positive,
for LKM please see the README.

Cheers,
Flo


signature.asc
Description: Digital signature

Re: help remove!! i got linux torjan

[Cantona Su]

oh yeah!
thanks all!

On Sat, 31 Jul 2004 10:45:29 +0200, Florian Ernst [EMAIL PROTECTED] wrote:
 Hello!
 
 On Sat, Jul 31, 2004 at 04:07:24PM +0800, Cantona Su wrote:
  Sorry, I still cannot find it on archive.
 
 See /usr/share/doc/chkrootkit/README.Debian and
 http://bugs.debian.org/chkrootkit.
 
  You mean both LKM trojan and LPD Worm are wrong detect??
 
 Might be. Do you have bitlbee installed - LPD false positive,
 for LKM please see the README.
 
 Cheers,
 Flo
 
 



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: help remove!! i got linux torjan

[Jerome BENOIT]

Hello,
please look into the archive:
if I remember well, this is a bug of chkrootkit.
Of course double check it !
hth,
Jerome
Cantona Su wrote:
Hi all, 

Here is the chkrootkit output:
Checking `lkm'... You have 6 process hidden for readdir command
You have 6 process hidden for ps command
Warning: Possible LKM Trojan installed
Searching for LPD Worm files and dirs... Possible LPD worm installed
Can someone help me with  remove them please!! 

Thanks!!


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]