The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

trojan?

Discussion in 'General Discussion' started by NNNils, Mar 28, 2003.

  1. NNNils

    NNNils Well-Known Member

    Joined:
    Sep 17, 2002
    Messages:
    580
    Likes Received:
    0
    Trophy Points:
    16
    In the past 3 days every day I get this mail:

    Hidden Pid detected! [pid 32394]
    hidden from ps: [yes]
    hidden from kernel: [yes]
    binary location: [/var/tmp/.../.kt/sk-1.3b/sk (deleted)]

    What should I do to preserve this or find out what it is?
     
  2. Networkologist

    Networkologist Well-Known Member

    Joined:
    Feb 5, 2003
    Messages:
    209
    Likes Received:
    0
    Trophy Points:
    16
    I'm seem to recall a thread about this. Do a search on trojan.

    checkrootkit was the answer, as I recall...
     
  3. NNNils

    NNNils Well-Known Member

    Joined:
    Sep 17, 2002
    Messages:
    580
    Likes Received:
    0
    Trophy Points:
    16
    I did a search and found some threads but the ones who had this problem already took some steps which appeared familiar to everyone but are not to me.

    So I would be very happy to get some "beginners" advice
     
  4. Networkologist

    Networkologist Well-Known Member

    Joined:
    Feb 5, 2003
    Messages:
    209
    Likes Received:
    0
    Trophy Points:
    16
  5. vishal

    vishal Well-Known Member

    Joined:
    Jan 28, 2003
    Messages:
    340
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    India
  6. maverick

    maverick Well-Known Member

    Joined:
    Jan 6, 2003
    Messages:
    68
    Likes Received:
    0
    Trophy Points:
    6
    Hi NNNils,

    We recently had this same trojan horse on our system. You can read more about it here:
    http://hysteria.sk/sd/sk/readme

    See the thread I started called Trojan Horse Detected for our resolution.

    Good luck.

    Mav.
     

Share This Page