[cobalt-developers] Chkrootkit

[Herb Rubin <herbr@xxxxxxxxxxxx>]

All,

I just ran chkrootkit on my Raq 4, and it said this:

Checking `lkm'... You have     1 process hidden for readdir command
You have     1 process hidden for ps command
Warning: Possible LKM Trojan installed

Is this a real trojan on my system? (LKM means Loadable Kernel Module)
Has a hacker loaded a kernel module? How can I see this module?

I do have portsentry running in the background, if that is important
here. False positive?

Should I be worried and if so what can I do to remove it?

Herb

-- 
Herb Rubin                 Pathfinders Software
herbr@xxxxxxxxxxxx         http://www.pfinders.com
phone: 650-692-9220        fax:   650-692-9250