chkrootkit: possible trojan

From: Stuart (fedora_at_bluewise.co.za)
Date: 09/11/04

  • Next message: Paul: "Re: chkrootkit: possible trojan" 
    To: fedora-list@redhat.com
Date: Sat, 11 Sep 2004 15:40:08 +0200

    Hi list

    On FC2 kernel 2.6.8.1 chkrootkit-0.44 reports a possible trojan Adore.

    Googling and paging through archives has led me to think that either it
    is a false positive ( either hosted virtual server environment /
    chkrootkit-0.44 reporting falsely), or if it is a true positive, the
    only way to kill it is to nuke the OS.

    I haven't been able to lsmod, init 6, etc... which leads me to think
    that it's a true positive.

    I would appreciate any advice, there is not much literature out there on
    the subject.

    TIA Stu@ 

    -- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: Paul: "Re: chkrootkit: possible trojan"