> so it seems either beagled is doing something nasty or i got a false positive I believe it's a false positive. You might want to open a bug here https://bugs.launchpad.net/ubuntu/+source/chkrootkit -- With Regards, Mehul Ved