> On Tue, 8 Oct 2002, Hesty P wrote: > >> After installing RH 8.0, I ran chkrootkit and it >> reports that some LKM trojan might exist. Running: >> ./chkrootkit -x lkm >> reveals that there are 6 processes hidden from ps. Is >> this any cause for concern? I did run ethereal and >> cannot see anything out of ordinary. > > Unless you have some really efficient hackers, it is more likely to be > the change to ps which no longer shows multiple threads. There is only > one security advisory for 8.0 (fetchmail), and I doubt hackers have time > to exploit it yet. > > Michael Young chkkrootkit started doing the same thing on my system as soon as I upgraded to 8.0. I assumed it's a result of something in 8.0 and not a real problem. Gerry
