[root@kswork  chkrootkit-0.46a]# ./chkrootkit  -q
Checking `ifconfig'... INFECTED
can't exec ./strings-static, Checking `pstree'... INFECTED
/etc/ld.so.hash 
Possible t0rn v8 (or variation) rootkit installed

/usr/lib/perl5/5.8.0/i386-linux-thread-multi/.packlist /usr/lib/openoffice/share/gnome/net/.directory /usr/lib/openoffice/share/gnome/net/.order /usr/lib/openoffice/share/kde/net/applnk/OpenOffice.org/.directory /usr/lib/openoffice/share/kde/net/applnk/OpenOffice.org/.order /usr/lib/qt-3.1/etc/settings/.qtrc.lock /usr/lib/qt-3.1/etc/settings/.qt_plugins_3.1rc.lock

Warning: Possible Showtee Rootkit installed
 /usr/include/file.h /usr/include/proc.h
Possible ShKit rootkit installed
not tested: can't exec ./ifpromisc
not tested: can't exec ./chkwtmp
not tested: can't exec ./chklastlog
not tested: can't exec ./chkutmp

各位有什么好的修复方法....

mark
没遇到过。数据重要吗？（不重要的话可以帮忙出些馊主意，嘿嘿）

到google去搜一下，看看发现的这些rootkit有没有什么修复方法。不过断口网络、光盘引导估计是肯定要做的第一步。