A new version of checkrootkit is available. chkutmp.c (Thanks to Jeremy Miller) the idea of this program is to display users that may have wiped themselves from the utmp log chkproc.c fix: better support for Linux threads chkrootkit new test: chkutmp new rootkits detected: Fu, Kenga3, ESRK some bug fixes Reproducible: Always Steps to Reproduce: 1. 2. 3.
From the ChangeLog: *chkrootkit-0.45 (25 Feb 2005) 25 Feb 2005; Aaron Walker <ka0ttic@gentoo.org> +files/chkrootkit-0.45-makefile.diff, +chkrootkit-0.45.ebuild: Version bump.