> Has anyone else seen chkrootkit (version 0.43) on 4.10-prerelease or
> later report chfn, chsh, and date as infected?
> Is this similar to the 5.x issues with chkrootkit?
Almost always. Mostly "date",
but sometimes "ps", "ls"...
First time I was scared to
death.
Nice little app with own
secret life.
ZK