[cobalt-users] Chkrootkit - possible slapper worm

["Andy Clyde, oxfordmusic.net" <cobalt-users@xxxxxxxxxxxxxxx>]

[raQ4]
i have just started getting the possible slapper worm message via
chkrootkit. i have run chkrootkit 4 or 5 times and it still comes up. i have
deleted just about everything from /tmp and still i get this message.

ps -auwx | grep http shows about 5 admserv and about 15 normal httpd
processes.
netstat -an | grep :80 shows about 10 connections which seems about right
(this server has about 100 websites on it, some busy, some not)
netstat -an | grep :443 shows just the one connection (the server listening
on this port).

i have checked for .bugtraq files and cannot find any.

am i infected or is there something i have missed?

cheers

andy