Hi! >>> Possible LKM Trojan installed found!!!
Please keep in mind, that LKM seems to be a false positive many times with chkrootkit, because chkrootkit in this case seems to test only against processes that don't show up everywhere (afaik a diff with ps and /proc). Please rescan after a reboot or so and look at this: Manfred Sindhoff wrote 22 May 2004 in debian-user-german: "The lkm check is known to produce false positives for NPTL kernels (2.6 kernels or 2.4 with NPTL patches). Common multithreaded programs which will show this behaviour are slapd, mozilla and apache2 if you use one of its threading MPMs." (http://www.wiggy.net/debian/developer-securing/) hth, Daniel _______________________________________________ Vserver mailing list [email protected] http://list.linux-vserver.org/mailman/listinfo/vserver
