From: Vincent Cunniffe (vincent at domain cunniffe.net)
Date: Thu 09 Aug 2001 - 12:05:40 IST
John P. Looney wrote:
> On Thu, Aug 09, 2001 at 10:34:36PM +0000, Vincent Cunniffe mentioned:
>
>>John P. Looney wrote:
>>
>>> I'm having performance problems with a machine. Big ones. For some
>>>reason, the load is between 1.5 and 6, though the "idle" as reported by
>>>top is around 60%. Any idea how I can find out what's being blocked, and
>>>how ?
>>>
>>On a side note, this is a similar set of result from the installation
>>of a trojan kernel module, which hides all other traces of itself
>>but can be detected by things such as external portmaps and a high
>>resting load on the machine.
>>
>>Unlikely, but you can find details on a recent (<1 week old) Bugtraq
>>posting.
>>
>
> Really unlikely. This is on a machine that gets reinstalled once a week.
> Nasty trojan. Where does it come from ?
You have to exec a binary ;-)
Vin
This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:11:31 GMT