At 09:34 PM 12/9/01 +0100, you wrote: >bindshell'... INFECTED (PORTS: 1524 31337) > > > > I could need some help with what this exactly means ? Also how to trace it > > and fix it..
Port 31337 is likely just a false positive from Portsentry (assuming you have it running). Don't know about 1524 though. Try shutting down Portsentry and running chkrootkit again. If you search www.deja.com for "chkrootkit 31337 bindshell portsentry" you'll see lots of discussion about this. Brian _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
