Need some help with a hacker exorcism....

Jason jason at kernbuilt.com
Mon May 17 12:35:01 EDT 2004


All,

So It's happened. I have been hacked and am showing multiple emails in my
"root" email box with subject line "Re: Your Email Advertising Campaign -
Reference #insert#here", among other symptoms. It looks like an LKM trojan
and I get nothing when I tail my maillog.



CHECKING: "lkm"
You have    17 process hidden for readdir command
You have    17 process hidden for ps command
               - WARNING!! INFECTED!! Possible LKM Trojan installed



If someone can lend a hand please contact me off list.

Thanks,

Jason Kern

www.KernBuilt.com
603.823.5150





More information about the gnhlug-discuss mailing list