Re: chkrootkit and LKM

[Jens Schuessler <jgs@trash.net>]

* Jacques Lav!gnotte <jaclavi@pollux.frmug.org> [07-03-03 14:05]:
> 
> Bonjour...
> 
> When running <chkrootkit> from a shell logged on the machine I get :
> 
> Checking `lkm'... You have     1 process hidden for readdir command
> You have     1 process hidden for ps command
> Warning: Possible LKM Trojan installed
> 
> Sometimes I get 2 or 3 processes, sometimes NONE.
> 
> 
> Are there knownes 'false positive' ? ????

I had this too. Search on google for "chkrootkit & lkm". 
Nothing to worry about.

Jens