Re: chkrootkit

From: Andreas Mueller (nospam_at_home.de)
Date: 05/20/03 

Date: Tue, 20 May 2003 08:52:59 +0200

Kasper Dupont wrote:

> Andreas Mueller wrote:
>>
>> if i start an app, which contacts the internet (xmms, licq.
>> knode), there are several processes without readdir detected ...
>
> Why do you think so? I think it is much more likely because those
> programs use threads in a way that chrootkit does not understand.
>

Hi Kasper ...

is this so? Would be great because i am getting paranoid. Everything
original and gpg-checked, but chkrootkit finds the "possible lkm-trojans".

If these are only threads, that chkrootkit do not understand, it is o.k !
Is it? 

-- 
Regards
Andy