Thread: [URGENT] Have my systems been compramised??
hi all
have noticed when running chkrootkit on around 1 desktop , laptop
checking `chkutmp'... tty of following user process(es) not found in /var/run/utmp !
process in question (running root on tty not exist) - /usr/bin/x :0 -auth /var/run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch -background none
cant find other mention online systems running patched install of 11.10 latest repo version of chkrootkit.
research have seems related remote access x not sure if there rootkit present. unfortunately x not speciality.
have ideas?
nothing worry about. that's x windows server, running display stuff on monitor (that's :0 means - x names displays numbers, , 0 local monitor).
have same process on machine.
steve.
Forum The Ubuntu Forum Community Ubuntu Specialised Support Security [ubuntu] [URGENT] Have my systems been compramised??
Ubuntu
Comments
Post a Comment