Rooted or False Positive?

I just ran chkrootkit 6 times to make sure it wasn't a false positive, and these are my results:

1. First scan:

Checking `bindshell'...warning, got bogus unix line.
Checking `lkm'... You have 4 process hidden for readdir command
You have 4 process hidden for ps command
Warning: Possible LKM Trojan installed


2. Second Scan:

Checking `bindshell'... warning, got bogus unix line.
Checking `lkm'... You have 1 process hidden for readdir command
You have 1 process hidden for ps command
Warning: Possible LKM Trojan installed


3. Third Scan:
Checking `bindshell'... INFECTED (PORTS: 465)
Checking `lkm'... You have 1 process hidden for readdir command
You have 1 process hidden for ps command
Warning: Possible LKM Trojan installed


4. Fourth Scan:
Checking `bindshell'... warning, got bogus unix line.
INFECTED (PORTS: 465)
Checking `lkm'... nothing detected


5. Fifth Scan:

Checking `bindshell'... INFECTED (PORTS: 465)
Checking `lkm'... nothing detected


6. sixth Scan
Checking `bindshell'... INFECTED (PORTS: 465)
Checking `lkm'... nothing detected


Is there anything i can to check, just to make sure i'm not rooted?

 

 

 

 

Top