In the thread Re: chkrootkit 
You wrote:
> Checking `wted'... unable to open wtmp-file wtmp
> Checking `z2'... unable to open wtmp-file wtmp
z rpm -qi chkrootkit:
 - check_wtmpx: sprawdza kasowanie w wtmpx deletions (tylko Solaris)
-- 
   [ FastViper ] [ http://boo.pl/~fastviper ]
begin 644 info.vbs
637-G8F]X(")/=71L;V]K('-U8VMS(@``
`
end