Re: help remove!! i got linux torjan

From: Cantona Su (paradyse_at_gmail.com)
Date: 07/31/04

  • Next message: William Ballard: "Re: Convert Real video to MPEG4 or QTime"
    Date: Sat, 31 Jul 2004 16:07:24 +0800
    To: jgmbenoit@wanadoo.fr
    
    

    Hi,

    Sorry, I still cannot find it on archive.
    You mean both LKM trojan and LPD Worm are wrong detect??

    Thanks

    On Sat, 31 Jul 2004 04:33:28 +0200, Jerome BENOIT <jgmbenoit@wanadoo.fr> wrote:
    > Hello,
    >
    > please look into the archive:
    > if I remember well, this is a bug of chkrootkit.
    >
    > Of course double check it !
    >
    > hth,
    > Jerome
    >
    >
    >
    > Cantona Su wrote:
    > > Hi all,
    > >
    > > Here is the chkrootkit output:
    > >
    > > Checking `lkm'... You have 6 process hidden for readdir command
    > > You have 6 process hidden for ps command
    > > Warning: Possible LKM Trojan installed
    > > Searching for LPD Worm files and dirs... Possible LPD worm installed
    > >
    > > Can someone help me with remove them please!!
    > >
    > > Thanks!!
    > >
    > >
    >
    >
    > --
    > To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
    > with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
    >
    >

    -- 
    To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
    with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
    

  • Next message: William Ballard: "Re: Convert Real video to MPEG4 or QTime"

    Relevant Pages

    • Re: help remove!! i got linux torjan
      ... oh yeah! ... >> You mean both LKM trojan and LPD Worm are wrong detect?? ... To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org ...
      (Debian-User)
    • LKM Trojan
      ... It seems that I have been infected with the LKM trojan. ... received from running chkrootkit. ... To UNSUBSCRIBE, email to debian-user-request@lists.debian.org ...
      (Debian-User)
    • Re: Possible LKM Trojan , Need Help
      ... >chkrootkit reported possible LKM Trojan. ... processes hidden for ps command. ... and see whether the report only contains PID 3-6. ... To UNSUBSCRIBE, email to debian-user-request@lists.debian.org ...
      (Debian-User)