Chkrootkit : "You have 99741 process hidden for readdir co..

Bison Agile · External Since: Sep 08, 2009 Posts: 2

Santa Madonna !

99741, no less... And a "possibly" LKM trojan installed on my
unfortunate machine.

I'm begining to undestand why my CPU temp is approaching 120 °C !

Checkint 'chkutmp'... The tty of the following user process(es) were not
found in /var/run/utmp ! And it shows a list of 5 users plus myself...

Is it serious doctor ?

David W. Hodgins · External Since: Dec 04, 2005 Posts: 277

On Tue, 08 Sep 2009 09:44:53 -0400, Bison Agile <bison DeleteThis @seskatchewan.org> wrote:

> 99741, no less... And a "possibly" LKM trojan installed on my
> unfortunate machine.
> I'm begining to undestand why my CPU temp is approaching 120 °C !
> Is it serious doctor ?

Nope. False alarm. The check for the LKM trojan simply checks to
see if you have a process running with the process id 12345,
if I remember correctly. Been a while since I've had it installed
and looked at the problem.

See http://osdir.com/ml/linux.mandrake.security.general/2008-06/msg00001.html
for the hidden processes (actually, threads).

As to the temp, try cleaning out the cpu heatsink, and ensure the fans
are working.

Regards, Dave Hodgins

--
Change nomail.afraid.org to ody.ca to reply by email.
(nomail.afraid.org has been set up specifically for
use in usenet. Feel free to use it yourself.)

Bison Agile · External Since: Sep 08, 2009 Posts: 2

David W. Hodgins wrote:
> On Tue, 08 Sep 2009 09:44:53 -0400, Bison Agile <bison.DeleteThis@seskatchewan.org>
> wrote:
>
>> 99741, no less... And a "possibly" LKM trojan installed on my
>> unfortunate machine.
>> I'm begining to undestand why my CPU temp is approaching 120 °C !
>> Is it serious doctor ?
>
> Nope. False alarm. The check for the LKM trojan simply checks to
> see if you have a process running with the process id 12345,
> if I remember correctly. Been a while since I've had it installed
> and looked at the problem.
>
> See
> http://osdir.com/ml/linux.mandrake.security.general/2008-06/msg00001.html
> for the hidden processes (actually, threads).
>
> As to the temp, try cleaning out the cpu heatsink, and ensure the fans
> are working.
>
> Regards, Dave Hodgins
>

Thank you, David. I feel better !

Bison