Re: has chkrootkit caught a problem for anyone?

[Andreas Vent-Schmidt <a.vent@procommerz.de>]

> On Thu, Dec 15, 2005 at 01:12:16PM -0600, alex wrote:
> > Okay, another question about chkrootkit:
> > Has anyone ever found a false positive with it?
>

Yes. Since I have SMTP over SSL (ssmtp) installed I get the message 
"INFECTED (PORTS: 465)" every day in my mailbox...

SSMTP uses tcp port 465...

And I got the "LKM" trouble, too, some days ago (as discussed on list 
lately).

Best regards,
Andreas

-- 
procommerz - Internet fuer Unternehmen
www.procommerz.de | 033925-90710

Öffentlicher GPG-Schlüssel unter:
http://www.procommerz.de/standort/avent_pub_key.gpg