Re: dead processes in 2.4.7-10smp and 2.4.19-rc1 (percraid problem?)

From: Justin Guyett (justin@soze.net)
Date: Sat Jul 06 2002 - 21:45:16 EST


> Jul 6 14:38:55 broken kernel: chmod T F7547500 5772 179 1 185 210 138 (NOTLB)
> Jul 6 14:38:55 broken kernel: Call Trace: [do_signal+166/688] [dev_ifsioc+31/1104] [sock_ioctl+63/128] [sys_ioctl+193/527] [signal_return+20/24]
> Jul 6 14:38:55 broken kernel: chmod Z F75475A0 5840 185 179 (L-TLB)
> Jul 6 14:38:55 broken kernel: Call Trace: [do_exit+711/768] [sig_exit+195/208] [dequeue_signal+100/208] [do_signal+450/688] [sock_write+174/208]
> Jul 6 14:38:55 broken kernel: [sys_write+265/352] [signal_return+20/24]

No need for anyone to chase this down; it was indeed Remote Shell
Trojan b.

justin

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Sun Jul 07 2002 - 22:00:17 EST