chkrootkit: strange result...!!!

Markus Heller markus at relix.de
Thu Dec 1 16:36:03 CET 2005


Hi guys,

can you please check if you get this, too? I got the following warning when I 
ran "chkrootkit":

Checking `bindshell'... INFECTED (PORTS:  465)

There's my kolab postfix on this port. It is recognized as a port which is 
infected by a rootkit. I got it on two different machines and I don't believe 
that both my kolabs are infected. 

Regards,
Markus




More information about the users mailing list