18 Aug
2004
18 Aug
'04
02:05
On Tuesday 17 August 2004 4:06 pm, Michael Ayers wrote:
http://www.chkrootkit.org/ is the place to look, chrootkit 0.43 . It works here with 9.1.
Mike
I don't think so.... helphand:/home/helphand/chkrootkit-0.43 # ./chkrootkit -q Checking `find'... INFECTED Checking `top'... INFECTED You have 7 process hidden for readdir command You have 7 process hidden for ps command Warning: Possible LKM Trojan installed eth0: PF_PACKET(/sbin/dhcpcd) helphand:/home/helphand/chkrootkit-0.43 # The problem is still there. Scott -- POPFile, the OpenSource EMail Classifier http://popfile.sourceforge.net/ Linux 2.6.5-7.104-default x86_64