chkrootkit and LKM

[Jacques Lav!gnotte <jaclavi@pollux.frmug.org>]

Bonjour...

When running <chkrootkit> from a shell logged on the machine I get :

Checking `lkm'... You have     1 process hidden for readdir command
You have     1 process hidden for ps command
Warning: Possible LKM Trojan installed

Sometimes I get 2 or 3 processes, sometimes NONE.


Are there knownes 'false positive' ? ????


Thanks in adavance

                Jacques