Searching for suspicious files and dirs, it may take a while... The following suspicious files and directories were found:
/usr/lib/debug/.build-id /lib/modules/4.8.0-36-generic/vdso/.build-id
/usr/lib/debug/.build-id /lib/modules/4.8.0-36-generic/vdso/.build-id
...
Searching for suspect PHP files...
/tmp/ecryptfs.7sYIFvgG/var/cache/dictionaries-common/sqspell.php
...
chkdirs: Warning: Possible LKM Trojan installed
...
Checking `sniffer'... /proc/4385/fd/14: Stale file handle
...
Checking `chkutmp'... The tty of the following user process(es) were not found
in /var/run/utmp !
...
Checking `OSX_RSPLUG'... not infected
ubuntu@ubuntu:~$
#is this the normal way chkrootkit output ends? (without any closing statement etc., as usual?)