LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Debian
User Name
Password
Debian This forum is for the discussion of Debian Linux.

Notices


Reply
  Search this Thread
Old 11-19-2008, 12:01 PM   #1
dave247
Member
 
Registered: May 2004
Posts: 206

Rep: Reputation: 30
trying to find a hidden process after chkrootkit


I ran a chkrootkit and it told me:

You have 1 process hidden for ps command
chkproc: Warning: Possible LKM Trojan installed

I am trying to figure out how to find what the hidden process is and what it is doing. I am still new to understanding what the ps command shows and how it relates to what is in the /proc folder and stuff.

Can someone point me in the right direction?

Last edited by dave247; 11-19-2008 at 12:04 PM.
 
Old 11-19-2008, 12:57 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,406
Blog Entries: 55

Rep: Reputation: 3578Reputation: 3578Reputation: 3578Reputation: 3578Reputation: 3578Reputation: 3578Reputation: 3578Reputation: 3578Reputation: 3578Reputation: 3578Reputation: 3578
Recycling electrons gives you How accurate is chkproc? from the Chkrootkit FAQ. More explanation in the Linux Security forum like this post from my fellow Linux Security forum moderator: http://www.linuxquestions.org/questi...11#post1450811
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to tell "find" to not search inside hidden folders? robo555 Linux - General 8 08-08-2011 06:30 AM
How do I make find exclude hidden files (.files) Rotwang Linux - General 2 08-08-2011 03:58 AM
How to find the process ID of process executing in the background akeneche Linux - Newbie 1 01-03-2008 10:08 AM
Find out whether a process is alive clalfa Programming 8 07-18-2007 10:36 AM
Find hidden executable files Wynd Linux - General 2 06-09-2003 03:09 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Debian

All times are GMT -5. The time now is 09:58 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration