Hi 

I have rkhunter and chkrootkit running in a cron job every morning and
every now and again I get chkrootkit results like this:

Checking `lkm'... You have     3 process hidden for ps command
Warning: Possible LKM Trojan installed

And sometimes this:

Checking `lkm'... You have     3 process hidden for readdir command
You have     3 process hidden for ps command
Warning: Possible LKM Trojan installed

Sometimes chkrootkit returns nothing detected and every time rkhunter
tells me nothing is wrong. Is this a false positive with chkrootkit and
debian woody?

Dave

Reply via email to