// Archives

Archive for December, 2009

Dissecting and removing the SHV5 rootkit

Yesterday I noticed some odd behavior on one of the Linux servers that I maintain. For one thing, every time I would run ‘top’ or ‘ps’, I would see the following message Unknown Hz value! (75) Assume 100 I decided to run rkhunter to check for rootkits. Needless to say, I was disappointed to discover […]