The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

chkrootkit results?

Discussion in 'General Discussion' started by ukagg, Oct 28, 2005.

  1. ukagg

    ukagg Active Member

    Joined:
    Aug 14, 2002
    Messages:
    35
    Likes Received:
    0
    Trophy Points:
    6
    Hi,

    I check my server with chkrootkit every few weeks. Today I got the following doubtful results:-

    Checking `bindshell'... warning, got bogus unix line.
    INFECTED (PORTS: 465)
    Checking `lkm'... You have 2 process hidden for readdir command
    You have 2 process hidden for ps command
    Warning: Possible LKM Trojan installed
    .
    .
    .
    Checking `z2'... user focus deleted or never loged from lastlog!
    user seachang deleted or never loged from lastlog!


    Can someone please advice me if this is something really serious? If yes, what is the remedy?

    Thanks
    UKA
     
  2. sh4ka

    sh4ka Well-Known Member

    Joined:
    May 12, 2005
    Messages:
    442
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    US
    cPanel Access Level:
    DataCenter Provider
    The first thing is totally normal at cPanel+RH Ent. servers.
    The second.. I suggest you to check out for those users if you didn't remove them.
     
Loading...
Similar Threads - chkrootkit results
  1. Darrylzuf
    Replies:
    1
    Views:
    173
  2. sc00zy
    Replies:
    7
    Views:
    287

Share This Page