Security Incidents mailing list archives
Re: chkrootkit and LKM?
From: "Janus N." Tøndering <janus () bananus dk>
Date: 17 Jun 2003 07:20:06 +0200
On Tue, 2003-06-17 at 03:26, Ali-Reza Anghaie wrote:
What does "chkrootkit -x lkm" return? If anything...
This returned a lot of GNOME related applications (and nothing else). Nelson Murilo sent me a patch to make chkproc skip threads which resultet in no processes showing. Going to single user mode also made (the original) chkproc return no hidden processes. Thanks for all your replies and help. Regards, Janus N. Tøndering -- Janus N. Tøndering <janus () bananus dk> ---------------------------------------------------------------------------- Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the world's premier technical IT security event! 10 tracks, 15 training sessions, 1,800 delegates from 30 nations including all of the top experts, from CSO's to "underground" security specialists. See for yourself what the buzz is about! Early-bird registration ends July 3. This event will sell out. www.blackhat.com ----------------------------------------------------------------------------
Current thread:
- chkrootkit and LKM? Janus N. (Jun 16)
- Re: chkrootkit and LKM? Ali-Reza Anghaie (Jun 16)
- Re: chkrootkit and LKM? Janus N. (Jun 17)
- Re: chkrootkit and LKM? Blade Runner (Jun 17)
- Re: chkrootkit and LKM? Valdis . Kletnieks (Jun 18)
- Re: chkrootkit and LKM? Tim Greer (Jun 17)
- RE: chkrootkit and LKM? Rob Shein (Jun 18)
- Re: chkrootkit and LKM? Tim Greer (Jun 18)
- RE: chkrootkit and LKM? Andrew Ruef (Jun 21)
- Re: chkrootkit and LKM? Tim Greer (Jun 23)
- RE: chkrootkit and LKM? Rob Shein (Jun 18)
- Re: chkrootkit and LKM? Ali-Reza Anghaie (Jun 16)