Hello, andy at lewman.com wrote: > Has anyone else seen chkrootkit (version 0.43) on 4.10-prerelease or > later report chfn, chsh, and date as infected? This is a reported bug of freebsd version detection in the shell script. It should be corrected in the next release of chkrootkit. -- Best regards, Artur Pydo.