massive .xsession-errors (was Re: chkrootkit finds 'value too large for defined data type')

2004-10-13 Thread Geoff Thurman
On Tuesday 12 October 2004 10:58 pm, s. keeling wrote: > Incoming from Geoff Thurman: > > I'm running woody on one hd, and have recently installed sarge on > > another by upgrading everything over the net after installing from > > my original woody cds. Tonight on the sarge hd, chkrootkit gives > >

Re: chkrootkit finds 'value too large for defined data type'

2004-10-12 Thread s. keeling
Incoming from Geoff Thurman: > > I'm running woody on one hd, and have recently installed sarge on > another by upgrading everything over the net after installing from my > original woody cds. Tonight on the sarge hd, chkrootkit gives about > twenty lines of > > /proc/1544/fd/1 : value too lar

Re: chkrootkit finds

2004-03-26 Thread Paul Johnson
David Baron <[EMAIL PROTECTED]> writes: > Checking `lkm'... You have 1 process hidden for readdir command > You have 1 process hidden for ps command > Warning: Possible LKM Trojan installed > > Is this a true report? > What does this do? > How to get rid of it if true? STFW, it's already

Re: chkrootkit finds

2004-03-26 Thread Chris Metzler
On Fri, 26 Mar 2004 12:33:01 +0200 David Baron <[EMAIL PROTECTED]> wrote: > > Checking `lkm'... You have 1 process hidden for readdir command > You have 1 process hidden for ps command > Warning: Possible LKM Trojan installed > > Is this a true report? > What does this do? > How to get rid

Re: chkrootkit finds

2004-03-26 Thread Wang WenRui
Are you running multithread process with NPTL? It seems to be a false positive of chkrootkit. Around 12 o'clock on 26 Mar, David Baron wrote: > Checking `lkm'... You have 1 process hidden for readdir command > You have 1 process hidden for ps command > Warning: Possible LKM Trojan installe