On Saturday 03 August 2002 04:00 pm, Keith Medhurst wrote: > Hello, > > Hope this is the right place to mention this. I've just been running the > latest chkrootkit (.36?) and it gives the following message.. > > Checking `bindshell'... INFECTED (PORTS: 1524 31337) > > I cant seem to find anything on these ports using 'netstat' - Anyone with > any ideas, or what a bindshell is for it to become infected? >
netstat -tupan will show that port sentry is listening on those ports -- Gerald Waugh http://frontstreetnetworks.com SOHO Networks & Web Site Hosting Front Street Networks LLC voice +1 203 785 0699 * fax +1 203 785 1787 229 Front Street, Ste. #C, New Haven CT 06513-3203 _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
