[ossec-list] Re: Possible Rootkit

[LNick]

Oh I forgot to mention that I also installed chkrootkit and rkhunter
on this system.  Chkrootkit did not find anything.  rkhunter found
some hidden directories which investigation on various forums seems to
indicate is normal for Ubuntu.  the directories are:

/etc/.pwd.lock
/dev/.static
/dev/.udev
/dev/.initramfs
/dev/.initramfs-tools

Thank you!