Solved rkhunter

fernandel

fernandel

I did run Rkhunter and I got:
/usr/local/sbin/pkg Warning
Suspect files: 1

pkg version is 2.6.2 and I dod no a problem with it.

Than run chkrootkit and I got:
Syslogk LKM rootkit... INFECTED: Possible Malicious Syslogk LKM rootkit installed
Checking `sniffer'... re0 is not promisc
re1 is not promisc
After running chkrootkit I have in /proc syslogk

What should I do, please. TY
 
Lars Skogstad

Thread 'Questions regarding chkrootkit and Syslogk LKM rootkit'

Hi

Did a random scan today with chkrootkit and rkhunter, chkrootkit gave me a warning:

"Searching for Syslogk LKM rootkit... INFECTED: Possible Malicious Syslogk LKM rootkit installed"

Anyone know anything about if this is normal error and can be ignored or if it can be something else?
I find just an empty file in /proc which says syslogk , haven't noticed anything earlier on incoming/outgoing traffic either but
haven't ran chkrootkit for a long while, have just run rkhunter.

Read a .pdf paper on it somewhere that it's difficult to discover since it hides very well etc.
 
You must log in or register to reply here.
Back
Top