On Sat, Nov 29, 2003 at 05:49:31AM -0500, Thomas H. George wrote: > chkrootkit reported possible LKM Trojan. 4 processes hidden for ps command.
Do you have any other evidence of the LKM Trojan, beyond chkrootkit's output? I think you may just be looking at a bug that's not yet been worked out. Note the PIDs: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=217525 The four with a zero PID are the ones that are probably seen as hidden.
signature.asc
Description: Digital signature
