All, Can nessus help me figure out anymore info in the situation below? I sent the following to Mysql but was asked to pay for support to get my question answered.
"Hello Brandon, We usually answer these types of questions to our technical support customers. Are you interested in technical support? Please review our available options and let me know what you think http://www.mysql.com/support/index.html"; Nice.. > I installed mysql, version 11.18 distribution 3.23.54 for pc-linux > i686 last friday (down loaded from mysql.com). While scanning my system today (with checkrootkit )I noticed that I > possibly have a LKM rootkit installed. I had seven processes hidden from the ps command. I got this information by > running checkrootkit version 0.38. I rebooted my server and log back in and re-ran checkrootkit. Now I had no sign > of a rootkit. I then started Apache and checked again. Nothing. So then I started mysql like so /usr/bin/safe_mysql & > and after it started, I re-ran checkrootkit. Now I had 7 hidden processes and a note from checkrootkit > saying that I possibly had a root kit installed on my system. So I shut down mysql > and re-ran checkrootkit. Now I was down to 5 hidden processes. So I rebooted and am sending this email. Does mysql run > processes that would be hidden from ps or do I have something else on my hands?. > > Brandon Amundson
