Here's the complete output of chkrootkit -q showing ps and netstat INFECTED

chkrootkit.out (text/plain), 7.55 KB, created by Mark Purtill on 2005-11-25 14:09:43 UTC

Checking `netstat'... INFECTED
Checking `ps'... INFECTED

/usr/lib/.keep /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/DB_File/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Digest/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Digest/MD5/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Digest/SHA1/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Digest/HMAC/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Gtk/Gdk/ImlibImage/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Gtk/Gdk/Pixbuf/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Gtk/base/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Gtk/GLArea/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Gtk/XmHTML/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Gtk/GladeXML/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Gnome/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/XML/Parser/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/XML/Writer/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/XML/RegExp/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Date/Manip/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/YAML/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Test/Harness/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Test/Simple/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Compress/Zlib/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/IO/Zlib/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/IO/String/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/IO/Socket/SSL/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Archive/Tar/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/TimeDate/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Pod/Parser/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/MIME/Base64/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/HTML/Tagset/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/HTML/Parser/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Storable/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Net/SSLeay/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Net/DNS/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Net/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Mail/SpamAssassin/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Mail/Mbox/MessageParser/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Audio/Tools/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Audio/Wav/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/WeakRef/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/FileHandle/Unget/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/URI/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/SVN/_Core/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Locale/gettext/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Filter/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Ogg/Vorbis/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Text/Balanced/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Parse/RecDescent/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Inline/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/grepmail/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/ExtUtils/Depends/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/ExtUtils/PkgConfig/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/ExtUtils/MakeMaker/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/ExtUtils/MakeMaker/.packliste /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/ExtUtils/F77/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Glib/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Getopt/Long/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/MP3/Info/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Term/ReadKey/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Term/ReadLine/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Time/Duration/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Time/Local/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/MusicBrainz/Tunepimp/tunepimp/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/HTML-Tree/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/libwww-perl/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Crypt/SSLeay/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Gtk2/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Image/Magick/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/PDL/.packlist /usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/Safe/.packlist /usr/lib/perl5/vendor_perl/5.8.5/i686-linux/auto/Data/Dumper/.packlist /usr/lib/perl5/5.8.6/i686-linux/.packlist /usr/lib/gkrellm2/plugins/.keep /usr/lib/xemacs/xemacs-packages/lisp/hyperbole/.hypb /usr/lib/xemacs/xemacs-packages/man/x-symbol/.ispell_xsymb /usr/lib/xemacs/xemacs-packages/etc/auctex/var/.dummy /usr/lib/ruby/gems/1.8/doc/.keep /usr/lib/mozilla/chrome.d/.keep /usr/lib/mozilla/extensions.d/.keep /usr/lib/mozilla/include/enigmime/.headerlist /usr/lib/mozilla/include/ipc/.headerlist /usr/lib/eclipse-3/plugins/org.eclipse.jdt.debug.ui_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.team.core_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.ui.externaltools_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.update.configurator_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.team.cvs.core_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.ui.console_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.help.base_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.jdt.debug_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.ant.ui_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.jdt.core_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.help_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.osgi_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.core.runtime_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.core.resources_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.help.webapp_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.ant.core_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.debug.ui_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.team.cvs.ssh_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.pde.build_3.0.0/feature/.project /usr/lib/eclipse-3/plugins/org.eclipse.pde.build_3.0.0/feature/rootfiles/.eclipseproduct /usr/lib/eclipse-3/plugins/org.eclipse.update.core_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.core.variables_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.debug.core_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.help.ui_3.0.0/.options /usr/lib/eclipse-3/plugins/org.eclipse.ui_3.0.0/.options /usr/lib/eclipse-3/.eclipseproduct /usr/lib/blender/.Blanguages /usr/lib/blender/.bfont.ttf /usr/lib/mozilla-firefox/chrome.d/.keep /usr/lib/mozilla-firefox/extensions.d/.keep /lib/.keep /lib/dev-state/.keep /lib/dev-state/.udevdb /lib/rcscripts/awk/.keep /lib/rcscripts/sh/.keep /lib/rcscripts/net.modules.d/helpers.d/.keep /lib/rcscripts/net.modules.d/.keep /lib/rcscripts/.keep /lib/udev-state/.keep
/lib/dev-state/.udevdb
 The tty of the following user process(es) were not found
 in /var/run/utmp !
! RUID          PID TTY    CMD
! purtill      9867 pts/2  /usr/lib/xemacs-21.4.17/i686-pc-linux/gnuserv
! purtill      9886 ttyS0  pppd 57600 -detach crtscts defaultroute usepeerdns user purtill