Are you running multithread process with NPTL? It seems to be a false positive of chkrootkit. Around 12 o'clock on 26 Mar, David Baron wrote: > Checking `lkm'... You have 1 process hidden for readdir command > You have 1 process hidden for ps command > Warning: Possible LKM Trojan installed > > Is this a true report? > What does this do? > How to get rid of it if true? > >