Need some help with a hacker exorcism....
Jason
jason at kernbuilt.com
Mon May 17 12:35:01 EDT 2004
All,
So It's happened. I have been hacked and am showing multiple emails in my
"root" email box with subject line "Re: Your Email Advertising Campaign -
Reference #insert#here", among other symptoms. It looks like an LKM trojan
and I get nothing when I tail my maillog.
CHECKING: "lkm"
You have 17 process hidden for readdir command
You have 17 process hidden for ps command
- WARNING!! INFECTED!! Possible LKM Trojan installed
If someone can lend a hand please contact me off list.
Thanks,
Jason Kern
www.KernBuilt.com
603.823.5150
More information about the gnhlug-discuss
mailing list