tiger

albi at scii.nl albi at scii.nl
Mon May 23 14:24:43 UTC 2005


On Mon, 23 May 2005 09:47:19 -0400
ajtiM <ajtim at ctel.net> wrote:

> Subject: Tiger Auditing Report
> 
> # Running chkrootkit (/usr/sbin/chkrootkit) to perform further
> # checks...
> NEW: --WARN-- [rootkit004f] Chkrootkit has detected a possible rootkit
> installation
> NEW: Warning: Possible LKM Trojan installed
> # Checking for existence of log files...
> # Checking running processes
> 
> Hi.
> 
> i got above message. I ran a chkrootkit and it didn't find anything??
> Is it  really possible that i have a Trojan installed?

you can try rkhunter to double-check (http://www.rootkit.nl)

chrootkit has given false reports about the LKM (linux kernel module)
trojan in the past, try a google-search for "lkm trojan chrootkit",
e.g. : http://seclists.org/lists/security-basics/2005/Apr/0317.html

see also : http://www.chkrootkit.org/faq/#6





More information about the ubuntu-users mailing list