Security Incidents mailing list archives

Re: suspicous activities...


From: Martin Schuster <schuster () isja org>
Date: Thu, 16 Sep 2004 08:10:27 +0200

On Wed, Sep 15, 2004 at 10:22:31AM +1000, hilton de meillon wrote:
Hi All, 
[...]  
xyzhost:~# chkrootkit -q
 
You have     2 process hidden for readdir command
You have     2 process hidden for ps command
Warning: Possible LKM Trojan installed
  eth0 is not promisc
 
Please have a look at  http://bugs.debian.org/chkrootkit  :)

what the hang happened there ??

Your sendmail-setup was broken, so sendmail happily relayed.
You panicked, and saw intruders where there were none *g*

hth,
-- 
+------------------------------------------------------------------* .-.
|            Martin Schuster            Microsoft is not the answer  /v\
| <Leto () tabr org>  http://www.tabr.org/  Microsoft is the question  // \\
|  <Douglas () karanet at>  ICQ# 20511117    "Linux!"  is the answer  /(   )\
+--------------------------------------------------------------*    ^^-^^

Attachment: signature.asc
Description: Digital signature


Current thread: