I tried this and it flagged the "suckit" rootkit as a false positive as per https://askubuntu.com/questions/597432/do-i-have-a-rootkit-suckit-detected-in-sbin-init-chkutmp-errors/

Thanks for the suggestion though as it led me to rkhunter :)

Reply via email to