Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 12 Jun 2004 13:15:33 +0200
From:      "Peter Rosa" <prosa@pro.sk>
To:        "FreeBSD Security" <freebsd-security@freebsd.org>
Subject:   Hacked or not ?
Message-ID:  <016301c4506e$947644e0$3501a8c0@pro.sk>

next in thread | raw e-mail | index | archive | help
Hi all,

please advice me - I was on holidays for one week. After return I found in
security mails from router (chkrootkit) following message:
Checking `lkm'... You have     1 process hidden for readdir command
You have     1 process hidden for ps command
Warning: Possible LKM Trojan installed

It apeared only onece. From previous and next days reports, the message is
not present.

How could I be sure, the machine is not hacked ?

Many thanks for any response.

Peter Rosa




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?016301c4506e$947644e0$3501a8c0>