LKM Trojan病毒

luolh

我用chkrootkit0.46a检测
发现如下

1. Checking `lkm'... You have     7 process hidden for ps command
   
2. chkproc: Warning: Possible LKM Trojan installed

复制代码

然后用./chkrootkit -x lkm

1. ###
   
2. ### Output of: ./chkproc -v -v -p 1
   
3. ###
   
4. PID   725: not in ps output
   
5. CWD   725: /var/named
   
6. EXE   725: /usr/sbin/named
   
7. PID   726: not in ps output
   
8. CWD   726: /var/named
   
9. EXE   726: /usr/sbin/named
   
10. PID   727: not in ps output
    
11. CWD   727: /var/named
    
12. EXE   727: /usr/sbin/named
    
13. PID   728: not in ps output
    
14. CWD   728: /var/named
    
15. EXE   728: /usr/sbin/named
    
16. PID   729: not in ps output
    
17. CWD   729: /var/named
    
18. EXE   729: /usr/sbin/named
    
19. PID   730: not in ps output
    
20. CWD   730: /var/named
    
21. EXE   730: /usr/sbin/named
    
22. PID   731: not in ps output
    
23. CWD   731: /var/named
    
24. EXE   731: /usr/sbin/named
    
25. You have     7 process hidden for ps command
    

复制代码

怎么清除LKM Trojan 啊？谢谢。

lunchan

只好刪了那些ps然後再重裝刪了的包了

http://www.derkeiler.com/Mailing ... x/2003-02/0024.html