Community Forums
Connect with us on LinkedIn
+ Reply to Thread
Results 1 to 3 of 3
  1. #1
    Member isputra's Avatar
    Join Date
    May 2003
    Location
    Mbelitar
    Posts
    593

    Default Chkrootkit:Checking `chkutmp'... The tty of the following user process(es) were not

    Hi,

    Today i notice that my chkrootkit test result give me strange message :

    Checking `chkutmp'... The tty of the following user process(es) were not found
    in /var/run/utmp !
    ! RUID PID TTY CMD
    ! root 29541 pts/0 /usr/bin/perl /scripts/realperlinstaller version Archive::Tar Archive::Zip BSD::Resource Bundle:BD::mysql Bundle::Interchange Bundle::LWP Business::OnlinePayment::AuthorizeNet Business::UPS CGI Compress::Zlib Crypt::SSLeay DBI Date::Parse Digest::MD5 Digeschkutmp: nothing deleted

    What happen with this ?
    Is it my server hacked ?

    Thanks
    It's me ...... It's me ......

  2. #2
    Super Moderator This forum account has been confirmed by cPanel staff to represent a vendor. chirpy's Avatar
    Join Date
    Jun 2002
    Location
    Go on, have a guess
    Posts
    13,495

    Default

    No, that's simply a terminal process running exactly what it shows. Probably a hung session that you terminated. If it's still there, kill of the owning PID, but be careful if it's simply a subprocess of a larger thread (i.e. do ps axf to find out more).
    Jonathan Michaelson

    Need your cPanel servers secured and tuned?
    cPanel Server Configuration, Security, Recovery and Antivirus/AntiSpam Services
    Developers of the most effective (and free) Firewall & Security Solution for cPanel Servers - csf
    http://www.configserver.com

  3. #3
    Member isputra's Avatar
    Join Date
    May 2003
    Location
    Mbelitar
    Posts
    593

    Default

    thanks chirpy.

    I use ps axf and no PID with 29541
    It's me ...... It's me ......

Similar Threads & Tags
Similar threads

  1. /bin/sh: /root/chkrootkit-0.46a/chkrootkit: Permission denied
    By jsimon in forum cPanel and WHM Discussions
    Replies: 2
    Last Post: 10-05-2006, 02:04 AM
  2. checking exim under another user
    By DigiCrime in forum cPanel and WHM Discussions
    Replies: 3
    Last Post: 08-01-2006, 10:52 PM
  3. lkm trojan "hidden process": chkrootkit false alarm?
    By Valetia in forum cPanel and WHM Discussions
    Replies: 7
    Last Post: 09-04-2005, 06:19 AM
  4. stdin: is not a tty
    By shazad in forum cPanel and WHM Discussions
    Replies: 4
    Last Post: 11-03-2003, 04:46 PM
  5. stdin: is not a tty
    By totalufo in forum cPanel and WHM Discussions
    Replies: 2
    Last Post: 03-09-2002, 06:54 PM
Linkedin       Facebook       Twitter       RSS       Flickr       YouTube