ajtim at ctel.net
Mon May 23 14:53:12 UTC 2005
On Monday 23 May 2005 10:24, albi at scii.nl wrote:
> On Mon, 23 May 2005 09:47:19 -0400
> ajtiM <ajtim at ctel.net> wrote:
> > Subject: Tiger Auditing Report
> > # Running chkrootkit (/usr/sbin/chkrootkit) to perform further
> > # checks...
> > NEW: --WARN-- [rootkit004f] Chkrootkit has detected a possible rootkit
> > installation
> > NEW: Warning: Possible LKM Trojan installed
> > # Checking for existence of log files...
> > # Checking running processes
> > Hi.
> > i got above message. I ran a chkrootkit and it didn't find anything??
> > Is it really possible that i have a Trojan installed?
> you can try rkhunter to double-check (http://www.rootkit.nl)
> chrootkit has given false reports about the LKM (linux kernel module)
> trojan in the past, try a google-search for "lkm trojan chrootkit",
> e.g. : http://seclists.org/lists/security-basics/2005/Apr/0317.html
> see also : http://www.chkrootkit.org/faq/#6
I installed rkhunter and it didn't find anything....
More information about the ubuntu-users