Hi I found a possible lkm - trojan on my system ! How can I get rid of this ? I detected it with chkrootkit. The infected file was ifconfig. I already replaced it and the file is no longer indicated as "INFECTED" But at the end of chkrootkit the lkm - warning still appears! Can anyone help me with this ? thankx Markus ________________________________________________________________________ Markus Schumacher BOSCH Intern 38000 Hills Tech Drive Farmington Hills, MI 48331 Department: AB/EBE2 Automotive Headquarter US Body Electronics Software *: markus.schumacher@us.bosch.com *: +1 (248) 848 2381 *: +1 (248) 553 1480 ______________________________________________________________
"EXTERN Schumacher Markus (Intern; AB/EBE)" wrote:
Hi
I found a possible lkm - trojan on my system ! How can I get rid of this ?
I detected it with chkrootkit. The infected file was ifconfig. I already replaced it and the file is no longer indicated as "INFECTED" But at the end of chkrootkit the lkm - warning still appears!
Perhaps this can help?!? http://members.prestige.net/tmiller12/papers/lkm.htm http://www.pimmel.com/articles/lkm-hacking.html Christoph -- .-. Ruhr-Universitaet Bochum /v\ L I N U X Lehrstuhl fuer Biophysik // \\ >Penguin Computing< c/o Christoph Wegener /( )\ Gebaeude ND 04/Nord ^^-^^ D-44780 Bochum, GERMANY Tel: +49 (234) 32-25754 Fax: +49 (234) 32-14626 mailto:cwe@bph.ruhr-uni-bochum.de http://www.bph.ruhr-uni-bochum.de
participants (2)
-
Christoph Wegener -
EXTERN Schumacher Markus (Intern; AB/EBE)