On Wed, 07 Dec 2005, Mikael Bergman wrote: > Nedanstående dök upp i mina loggar. Känns inte bra i maggropen. Någon som > kan lugna mig eller? > > /etc/cron.daily/chkrootkit: > The following suspicious files and directories were found: > /usr/lib/j2se/1.4/jre/.systemPrefs > /usr/lib/j2se/1.4/jre/.systemPrefs/.systemRootModFile > /usr/lib/j2se/1.4/jre/.systemPrefs/.system.lock > /usr/lib/j2se/1.4/jre/.systemPrefs > You have 1 process hidden for readdir command > You have 1 process hidden for ps command > chkproc: Warning: Possible LKM Trojan installed > eth0: PACKET SNIFFER(/sbin/dhclient[5746]) > > Raderna med "/usr/lib/j2se/1.4/jre/.systemPrefs*" har funnits ett tag.
Om jag var du skulle jag köra en vända med rkhunter också. -- patrik_wallstrom->foodfight->[EMAIL PROTECTED]>+46-733173956 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
