tiger

ajtiM ajtim at ctel.net
Mon May 23 14:53:12 UTC 2005


On Monday 23 May 2005 10:24, albi at scii.nl wrote:
> On Mon, 23 May 2005 09:47:19 -0400
>
> ajtiM <ajtim at ctel.net> wrote:
> > Subject: Tiger Auditing Report
> >
> > # Running chkrootkit (/usr/sbin/chkrootkit) to perform further
> > # checks...
> > NEW: --WARN-- [rootkit004f] Chkrootkit has detected a possible rootkit
> > installation
> > NEW: Warning: Possible LKM Trojan installed
> > # Checking for existence of log files...
> > # Checking running processes
> >
> > Hi.
> >
> > i got above message. I ran a chkrootkit and it didn't find anything??
> > Is it  really possible that i have a Trojan installed?
>
> you can try rkhunter to double-check (http://www.rootkit.nl)
>
> chrootkit has given false reports about the LKM (linux kernel module)
> trojan in the past, try a google-search for "lkm trojan chrootkit",
> e.g. : http://seclists.org/lists/security-basics/2005/Apr/0317.html
>
> see also : http://www.chkrootkit.org/faq/#6

I installed rkhunter and it didn't find anything....




More information about the ubuntu-users mailing list