[Full-Disclosure] Removing ShKit Root Kit

[Chris <chris@cr-secure.net>]

Can anyone reccomend some links or useful information for removing the 
"ShKit Rootkit". CHKROOTKIT detected this thing on a RedHat 8.0 server 
owned by a client of mine.

"Searching for ShKit rootkit default files and dirs... Possible ShKit 
rootkit installed" <== chkrootkit output

I have only read limited information on this rootkit from a honeypot 
report where it was used, no cleaning information. Ive googled a bunch 
of times, dont go out of your way to answer this, the box will be redone 
anyway. Im just curious to find out what this rootkit is about, not even 
packetstorm has a copy to look at :)

Thanks,

ChrisR-
http://www.cr-secure.net

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html