Re: [Vserver] chkrootkit

From: Tom Laermans <tom.laermans_at_powersource.cx>
Date: Sun 30 Apr 2006 - 09:59:32 BST
Message-Id: <1146387572.16024.9.camel@boo.powersource.cx>

On Sun, 2006-04-30 at 13:18 +0300, Nikolay Kichukov wrote:
> I hope that is normal and there is no need to worry. Nice one Chuck! ;-)

datalock:~# chkrootkit -q
datalock:~# uname -a
Linux datalock.powersource.cx 2.6.14.3-vs2.0.1 #2 SMP Sat Dec 17
02:37:41 CET 2005 i686 GNU/Linux

Nothing here... neither on my other vserver hosts :)

Tom

>
> Regards,
> -Nikolay Kichukov
>
> On Sat, 2006-04-29 at 23:23 -0400, Chuck wrote:
> > i just ran chkrootkit on our vserver host and got this... i suspect this is a
> > result of the vserver patches and is normal? or should i worry?
> >
> > Checking `bindshell'... INFECTED (PORTS: 465)
> > Checking `lkm'... You have 1 process hidden for readdir command
> > You have 1 process hidden for ps command
> > chkproc: Warning: Possible LKM Trojan installed
> >
> >
> >
> >

_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Sun Apr 30 09:59:58 2006

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Sun 30 Apr 2006 - 10:00:07 BST by hypermail 2.1.8