Re: chkrootkit and LKM?

From: Janus N. (janusat_private)
Date: Mon Jun 16 2003 - 22:20:06 PDT

  • Next message: Adam Sampson: "Re: chkrootkit and LKM?"

    On Tue, 2003-06-17 at 03:26, Ali-Reza Anghaie wrote:
    > What does "chkrootkit -x lkm" return? If anything...
    This returned a lot of GNOME related applications (and nothing 
    else). Nelson Murilo sent me a patch to make chkproc skip 
    threads which resultet in no processes showing. Going to single
    user mode also made (the original) chkproc return no hidden
    processes.
    
    Thanks for all your replies and help.
    
    Regards,
    Janus N. Tøndering
    
    -- 
    Janus N. Tøndering <janusat_private>
    
    
    ----------------------------------------------------------------------------
    Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the 
    world's premier technical IT security event! 10 tracks, 15 training sessions, 
    1,800 delegates from 30 nations including all of the top experts, from CSO's to 
    "underground" security specialists.  See for yourself what the buzz is about!  
    Early-bird registration ends July 3.  This event will sell out. www.blackhat.com
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Tue Jun 17 2003 - 17:51:32 PDT