tiger
albi at scii.nl
albi at scii.nl
Mon May 23 14:24:43 UTC 2005
On Mon, 23 May 2005 09:47:19 -0400
ajtiM <ajtim at ctel.net> wrote:
> Subject: Tiger Auditing Report
>
> # Running chkrootkit (/usr/sbin/chkrootkit) to perform further
> # checks...
> NEW: --WARN-- [rootkit004f] Chkrootkit has detected a possible rootkit
> installation
> NEW: Warning: Possible LKM Trojan installed
> # Checking for existence of log files...
> # Checking running processes
>
> Hi.
>
> i got above message. I ran a chkrootkit and it didn't find anything??
> Is it really possible that i have a Trojan installed?
you can try rkhunter to double-check (http://www.rootkit.nl)
chrootkit has given false reports about the LKM (linux kernel module)
trojan in the past, try a google-search for "lkm trojan chrootkit",
e.g. : http://seclists.org/lists/security-basics/2005/Apr/0317.html
see also : http://www.chkrootkit.org/faq/#6
More information about the ubuntu-users
mailing list