Le mer 26/11/2003 à 01:17, Michael Bordignon a écrit : > > I was just running 'chkrootkit' and came across this warning: > > > > > Checking `lkm'... You have 4 process hidden for ps command > > > Warning: Possible LKM Trojan installed > > I have the same problem.. I believe it's a bug in chkrootkit >
Do you stop the services before running chkrootkit? It can append that chkrootkit report false positive on machine still running services. I had the experience with exim. When I stop it I had no false positive... > > Michael >
