Security Incidents mailing list archives
Re: suspicous activities...
From: Martin Schuster <schuster () isja org>
Date: Thu, 16 Sep 2004 08:10:27 +0200
On Wed, Sep 15, 2004 at 10:22:31AM +1000, hilton de meillon wrote:
Hi All, [...] xyzhost:~# chkrootkit -q You have 2 process hidden for readdir command You have 2 process hidden for ps command Warning: Possible LKM Trojan installed eth0 is not promisc
Please have a look at http://bugs.debian.org/chkrootkit :)
what the hang happened there ??
Your sendmail-setup was broken, so sendmail happily relayed. You panicked, and saw intruders where there were none *g* hth, -- +------------------------------------------------------------------* .-. | Martin Schuster Microsoft is not the answer /v\ | <Leto () tabr org> http://www.tabr.org/ Microsoft is the question // \\ | <Douglas () karanet at> ICQ# 20511117 "Linux!" is the answer /( )\ +--------------------------------------------------------------* ^^-^^
Attachment:
signature.asc
Description: Digital signature
Current thread:
- suspicous activities... hilton de meillon (Sep 15)
- Re: suspicous activities... L0stm4n (Sep 18)
- Re: suspicous activities... Sean (Sep 19)
- Re: suspicous activities... Martin Schuster (Sep 20)
- <Possible follow-ups>
- RE: suspicous activities... Michael Shirk (Sep 16)
- RE: suspicous activities... hilton de meillon (Sep 16)
- RE: suspicous activities... Luke Marty (Sep 16)