Gentoo Archives: gentoo-user

From: Mick <michaelkintzios@×××××.com>
To: gentoo-user@l.g.o
Subject: [gentoo-user] Another chkrootkit false positive?
Date: Mon, 04 Apr 2011 20:09:34
Message-Id: 201104042108.26149.michaelkintzios@gmail.com
1 You have 2 process hidden for readdir command
2 You have 3 process hidden for ps command
3 chkproc: Warning: Possible LKM Trojan installed
4 The tty of the following user process(es) were not found
5 in /var/run/utmp !
6 ! RUID PID TTY CMD
7
8 however, rkhunter shows:
9
10 Heroin LKM [ Not found ]
11
12 Is this different to LKM Trojan mentioned above?
13
14 --
15 Regards,
16 Mick

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-user] Another chkrootkit false positive? Paul Hartman <paul.hartman+gentoo@×××××.com>