LWN.net Logo

A new Adore root kit

A new Adore root kit

Posted Mar 25, 2004 10:11 UTC (Thu) by Kstat (guest, #20442)
Parent article: A new Adore root kit

Sorry to kill the myth, but adore is very easy to detect (at least 3 differents ways). Of course, If the adore rk is sligly modified it will be more difficult to find :).

I let you goole on how to easyly find adore :)

Kstat <- check for this too, this is a good tool to detect adore :)


(Log in to post comments)

A new Adore root kit

Posted Mar 26, 2004 10:57 UTC (Fri) by trolldbois (guest, #20139) [Link]

And why doesn't adore prevent kstat from reading useful information from /dev/kmem ? ;)

A new Adore root kit

Posted Oct 17, 2005 18:07 UTC (Mon) by xian1990@yahoo.com (guest, #33150) [Link]

What version of Linux kernel does Adore affect?

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds