Security Basics mailing list archives
hidden processes
From: Vlady <vlady () cyber2000 ca>
Date: Wed, 30 Jul 2003 17:28:22 -0400
Hi, One of my mashines is hacked and chkrootkit-0.40 tells me that I have 3 proccess hidden from "ps". All of my system binaries looks like beeing clean. Using "netstat" I can see that there is not a lisenning servise other than the services suppused to work on the machine. I know that the best way to go further is to reinstall the machine but first I would like to understand more of what have happend. My question is how can I see this 3 hidden processes. Cheers Vlady --------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- hidden processes Vlady (Jul 30)
- Re: hidden processes Meritt James (Jul 31)
- Re: hidden processes Daniel B. Cid (Jul 31)
- Re: hidden processes Erik Vincent (Jul 31)
- Re: hidden processes Birl (Jul 31)
- Re: hidden processes gminick (Jul 31)
- <Possible follow-ups>
- RE: hidden processes Johnson, Kevin (Jul 31)
- Re: hidden processes Meritt James (Jul 31)