Re: Possible LKM Trojan , Need Help - Thank You

2003-11-29 Thread Sebastian Kapfer
On Sat, 29 Nov 2003 21:10:14 +0100, Thomas H. George wrote: > I still must learn about the "/rr_moved" directory which blocks my > backups but this is a separate issue so I will post a separate question. man mkisofs, look for rr_moved in various capitalizations. -- Best Regards, | Hi! I'm a .s

Re: Possible LKM Trojan , Need Help - Thank You

2003-11-29 Thread Frank Gevaerts
On Sat, Nov 29, 2003 at 09:39:30AM -0500, Thomas H. George wrote: > > I still must learn about the "/rr_moved" directory which blocks my In case it helps : rr_moved is the name used for a special directory on iso9660 filesystems when using Rock Ridge extensions. IIRC it is needed because standard

Re: Possible LKM Trojan , Need Help - Thank You

2003-11-29 Thread Thomas H. George
On Sat, Nov 29, 2003 at 10:58:31AM -0500, Paul Morgan wrote: > On Sat, 29 Nov 2003 05:49:31 -0500, Thomas H. George wrote: > > > chkrootkit reported possible LKM Trojan. 4 processes hidden for ps command. > > > > Before reformating the hard drive and reinstalling Debian, started a dvd > > backu