<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>LinuxHostingSupport &#187; chkproc: Warning: Possible LKM Trojan installed</title>
	<atom:link href="http://linuxhostingsupport.net/blog/tag/chkproc-warning-possible-lkm-trojan-installed/feed" rel="self" type="application/rss+xml" />
	<link>http://linuxhostingsupport.net/blog</link>
	<description>Everything About _Linux WebHosting_</description>
	<lastBuildDate>Tue, 15 May 2012 15:39:04 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>INFECTED (PORTS: 465) + LKM Trojan installed</title>
		<link>http://linuxhostingsupport.net/blog/infected-ports-465-possible-lkm-trojan-installed</link>
		<comments>http://linuxhostingsupport.net/blog/infected-ports-465-possible-lkm-trojan-installed#comments</comments>
		<pubDate>Fri, 27 Nov 2009 10:30:41 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[cPanel Management]]></category>
		<category><![CDATA[chkproc: Warning: Possible LKM Trojan installed]]></category>
		<category><![CDATA[how to install chkrootkit?]]></category>
		<category><![CDATA[how to install rkhunter?]]></category>
		<category><![CDATA[how to scan a server using chkrootkit?]]></category>
		<category><![CDATA[INFECTED (PORTS: 465)]]></category>
		<category><![CDATA[Possible LKM Trojan installed]]></category>
		<category><![CDATA[warnings shows in chkrootkit scan]]></category>

		<guid isPermaLink="false">http://linuxhostingsupport.net/blog/?p=347</guid>
		<description><![CDATA[Chkrootkit scan result: INFECTED (PORTS: 465) + Possible LKM Trojan installed
You may see the following output in the chkrootkit scan:
INFECTED (PORTS: 465)
You have 1 process hidden for readdir command
You have 1 process hidden for ps command
chkproc: Warning: Possible LKM Trojan installed
The server is not infected but these are false positives.
The warning &#8220;INFECTED (PORTS: 465)&#8221; is a false alarm and can be ignored. The port 465 belogs to SMTPS service and if not in use, you can block it using iptables to avoid the false alarm.
Regarding &#8220;chkproc: Warning: Possible [...]]]></description>
		<wfw:commentRss>http://linuxhostingsupport.net/blog/infected-ports-465-possible-lkm-trojan-installed/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

