chkrootkit finds 94 process hidden for readdir

Ivan Voras ivoras at fer.hr
Sat Dec 23 16:05:04 PST 2006


Matthew Herzog wrote:

> I ran chkrootkit yesterday and saw this:
> 
> Checking `lkm'... You have    94 process hidden for readdir command
> chkproc: Warning: Possible LKM Trojan installed

Does LKM stand for "Linux Kernel Module"? If so, no wonder the check has
gone lala :)



More information about the freebsd-stable mailing list