From owner-FreeBSD-users-jp@jp.FreeBSD.org Tue Apr 13 18:10:22 2004
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) id i3D9AMB55686;
	Tue, 13 Apr 2004 18:10:22 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from mail530.nifty.com (mail530.nifty.com [202.248.37.252])
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) with ESMTP/inet id i3D9AM955681
	for <FreeBSD-users-jp@jp.FreeBSD.org>; Tue, 13 Apr 2004 18:10:22 +0900 (JST)
	(envelope-from endo_t@nifty.com)
Received: from [192.168.103.101] (YahooBB218182064015.bbtec.net [218.182.64.15])by mail530.nifty.com with ESMTP id i3D9AGSJ006192
	for <FreeBSD-users-jp@jp.FreeBSD.org>; Tue, 13 Apr 2004 18:10:17 +0900
From: =?ISO-2022-JP?B?GyRCMXNGIxsoQiAbJEI9U001GyhC?= <endo_t@nifty.com>
To: FreeBSD-users-jp@jp.FreeBSD.org
Message-Id: <20040413180354.9FF2.ENDO_T@nifty.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-2022-JP"
Content-Transfer-Encoding: 7bit
X-Mailer: Becky! ver. 2.07.04 [ja]
Reply-To: FreeBSD-users-jp@jp.FreeBSD.org
Precedence: list
Date: Tue, 13 Apr 2004 18:08:45 +0900
X-Sequence: FreeBSD-users-jp 78917
Subject: [FreeBSD-users-jp 78917] chkrootkit
Sender: owner-FreeBSD-users-jp@jp.FreeBSD.org
X-Originator: endo_t@nifty.com
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+040413

$B1sF#$G$9!#(B

$B:G6a$*GO</$J<ALd$P$+$j$G62=L$G$9!#(B

$B$^$!!"N.9T$J$s$G!"(Bchkrootkit $B<B9T$7$F$_$^$7$?!#(B

4.3R $B$N%^%7%s$G$O$^$!!"2?$b8+$D$+$i$J$+$C$?$s$G$9$,!"(B4.8R $B$N(B
$B%^%7%s$G$O0J2<$N$h$&$J;v$r8@$o$l$^$7$?!#(B

Checking `lkm'... You have     5 process hidden for readdir command
You have     5 process hidden for ps command
Warning: Possible LKM Trojan installed

$B$^$!!"$]$C$7$V$k$J$s$G!"$$$$$+$J$!!"$J$s$F;W$C$F$k$s$G$9$,!"(B
$B$0$0$C$F$_$k$H!"(BBTS $B$,F0$$$F$k$H$+$J$s$H$+!#$^$!!"$?$$$F$$$O(B
Linux $B$N5-;v$J$s$G$9$1$I!&!&!&(B

$B$3$NJU$N:G?7>pJs$r$"$s$^$jCN$i$J$$$N$G!"$4B8$8$NJ}!"%]%$%s%?(B
$B$G$b$$$$$N$G$*65$(D:$1$^$;$s$+!)(B

FreeBSD $B$G(B chkrootkit $B$N5-;vC5$7$F$_$?$i1Q8l$P$C$+$G>.@8$K$O(B
$B$A$H$-$S$A$#$G$9!#(B(^^;

-- 
$B1sF#=SM5(B <endo_t@nifty.com>

