Hacked or not ?

Peter Rosa prosa at pro.sk
Sat Jun 12 11:16:32 GMT 2004


Hi all,

please advice me - I was on holidays for one week. After return I found in
security mails from router (chkrootkit) following message:
Checking `lkm'... You have     1 process hidden for readdir command
You have     1 process hidden for ps command
Warning: Possible LKM Trojan installed

It apeared only onece. From previous and next days reports, the message is
not present.

How could I be sure, the machine is not hacked ?

Many thanks for any response.

Peter Rosa




More information about the freebsd-security mailing list