1 process hidden for readdir command.

Portal Home > Knowledgebase > Articles Database > 1 process hidden for readdir command.

Posted by lifetimes, 04-13-2008, 07:48 AM
My server used CPL Plesk, Watchdog 2.0 and chkrootkit, but I scan with CPL there is nothing. Although when I log in with SSH and use command chkrootkit to scan server and I see these : " Checking `lkm'... You have 1 process hidden for readdir command You have 1 process hidden for ps command chkproc: Warning: Possible LKM Trojan installed " After 5 minutes, I scan again and no message to be received. This is usually happen. What about these process? And what solution can be? Your are all professional, can you provide me any advice?
Posted by andren, 04-13-2008, 02:28 PM
Probably a false positive.
Posted by JulesR, 04-14-2008, 06:01 AM
Very likely a false alternative. If you want some peace of mind, try some alternate rootkit scanners like rkhunter for example.

Add to Favourites Print this Article