[plug] GAM SERVER - chkrootkit ?

[Ranime]

On Fri, 2 Dec 2005 11:44 am, you wrote:
> On Fri, 2 Dec 2005 10:56, Ranime wrote:
> > Googled, read but not understood...  I think I need help....
> >
> > Two Questions  here :
> >
> > 1. My Mandriva 10.2 (LE2005) and 2006 boxes  have two instances of
> >  'GAM SERVER'
> > KPM shows one for 'root' and one for the 'user' as sleeping.
> > trying to 'KILL' is not allowed and they they momentarily show as
> > 'ZOMBIED' ?
>
> GAM Server = Global Array Manager Server
> Seems to be a file monitoring deamon ABI compatible with FAM.
>
> You have a RAID ?
>
> > can someone please let me know what 'GAM SERVER' is used for on
> > Mandriva ?
> >
> > 2. Both boxes when checked with 'chkrootkit' show
> > Find... INFECTED
> >
> > again, googling this appears that this may not be a hacked machine,
> > but a clash between an older chkrootkit 0.43 and the newer kernel
> > version.....?
> > can someone please confirm this please ,
> > has anyone got a solution if needed , or have seen this before ?
>
> Quite possible. Chkrootkit displays some broken behaviour in this
> sort of situation. Seen often here (think I have LKM rootkit).
> Upgrade chkrootkit if possible... otherwise ignore.
>
> HTH

Not using raid on any box...
I will get the 0.46a chkrootkit and see...
thanks, 

-- 
>>>>>>>>>>>>>>>>>> <<<<<<<<<<<<<<<<<<
Regards.
Ranime.

Linux Counter Registered User #302050
Mandriva 10.2 KDE 3.3 

sipphone :            17476016164
free world dialup :   630406