Re: [Vserver] chkrootkit

From: Nikolay Kichukov <hijacker_at_oldum.net>
Date: Sun 30 Apr 2006 - 11:18:41 BST
Message-Id: <1146392322.2827.1.camel@ccja.localhost>

I hope that is normal and there is no need to worry. Nice one Chuck! ;-)

Regards,
-Nikolay Kichukov

On Sat, 2006-04-29 at 23:23 -0400, Chuck wrote:
> i just ran chkrootkit on our vserver host and got this... i suspect this is a
> result of the vserver patches and is normal? or should i worry?
>
> Checking `bindshell'... INFECTED (PORTS: 465)
> Checking `lkm'... You have 1 process hidden for readdir command
> You have 1 process hidden for ps command
> chkproc: Warning: Possible LKM Trojan installed
>
>
>
>

-- 
Когато сме щастливи, сме добри.
Но когато сме добри, не винаги сме щастливи...
-Оскар Уайлд
_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Sun Apr 30 09:24:32 2006
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Sun 30 Apr 2006 - 09:24:39 BST by hypermail 2.1.8