че за хуйня??
```
# chkrootkit -q
/dev/shm/pulse-shm-1491499316
/usr/lib/python2.7/dist-packages/PyQt4/uic/widget-plugins/.noinit /usr/lib/debug/.build-id /lib/modules/4.4.0-21-generic/vdso/.build-id /lib/modules/4.4.0-22-generic/vdso/.build-id
/usr/lib/debug/.build-id /lib/modules/4.4.0-21-generic/vdso/.build-id /lib/modules/4.4.0-22-generic/vdso/.build-id
Possible Linux/Ebury - Operation Windigo installetd
wlp3s0: PACKET SNIFFER(/sbin/wpa_supplicant[1095], /sbin/wpa_supplicant[1095], /sbin/dhclient[8323])
user root deleted or never logged from lastlog!
The tty of the following user process(es) were not found
in /var/run/utmp !
```
а именно это **Possible Linux/Ebury - Operation Windigo installetd**
ЗЫ убунта 16.04, тестил на других 16.04 - та же песня