Re: chkrootkit hidden processes possible LKM Trojan.

2008-08-22 Thread Adam Hardy
Wackojacko on 21/08/08 20:32, wrote: Adam Hardy wrote: However, using #chkrootkit -x lkm and #/usr/lib/chkrootkit/chkproc -v -v Wacko, you haven't got a script that does that have you? (Identifying the process that is hidden from /proc/PID?) Seems a bit laborious doing it manually more th

Re: chkrootkit hidden processes possible LKM Trojan.

2008-08-21 Thread Wackojacko
Adam Hardy wrote: However, using #chkrootkit -x lkm and #/usr/lib/chkrootkit/chkproc -v -v Wacko, you haven't got a script that does that have you? (Identifying the process that is hidden from /proc/PID?) Seems a bit laborious doing it manually more than once. Adam As per my original

Re: chkrootkit hidden processes possible LKM Trojan.

2008-08-20 Thread Adam Hardy
Wackojacko on 16/08/08 13:02, wrote: Ron Johnson wrote: On 08/16/08 06:17, Wackojacko wrote: Hi all I realise there has been some discussion recently over the merits or otherwise of chkrootkit, but the last two days it is warning of hidden processes (ps and readdir). After googling a littl

Re: chkrootkit hidden processes possible LKM Trojan.

2008-08-19 Thread Adam Hardy
Wackojacko on 16/08/08 13:02, wrote: Ron Johnson wrote: On 08/16/08 06:17, Wackojacko wrote: Hi all I realise there has been some discussion recently over the merits or otherwise of chkrootkit, but the last two days it is warning of hidden processes (ps and readdir). After googling a littl

Re: chkrootkit hidden processes possible LKM Trojan.

2008-08-16 Thread Wackojacko
Ron Johnson wrote: On 08/16/08 06:17, Wackojacko wrote: Hi all I realise there has been some discussion recently over the merits or otherwise of chkrootkit, but the last two days it is warning of hidden processes (ps and readdir). After googling a little further I see this has been a proble

Re: chkrootkit hidden processes possible LKM Trojan.

2008-08-16 Thread Ron Johnson
On 08/16/08 06:17, Wackojacko wrote: Hi all I realise there has been some discussion recently over the merits or otherwise of chkrootkit, but the last two days it is warning of hidden processes (ps and readdir). After googling a little further I see this has been a problem in the past but w

chkrootkit hidden processes possible LKM Trojan.

2008-08-16 Thread Wackojacko
Hi all I realise there has been some discussion recently over the merits or otherwise of chkrootkit, but the last two days it is warning of hidden processes (ps and readdir). After googling a little further I see this has been a problem in the past but was unable to find any recent examples.