Re: INFECTED (PORTS: 600)

To: debian-security@lists.debian.org
Subject: Re: INFECTED (PORTS: 600)
From: Lee Braiden <lee.b@digitalunleashed.com>
Date: Thu, 18 May 2006 22:26:57 +0100
Message-id: <[🔎] 200605182226.58378.lee.b@digitalunleashed.com>
In-reply-to: <[🔎] 7CE8891E706BC74AB0E49412655C9E76DCAA13@socrates.INT.M-CAM.COM>
References: <[🔎] 7CE8891E706BC74AB0E49412655C9E76DCAA13@socrates.INT.M-CAM.COM>

On Thursday 18 May 2006 14:17, Morgan Walker wrote:
> running 'chkrootkit -q' I received the following output:

> INFECTED (PORTS:  600)

> udp        0      0 0.0.0.0:600             0.0.0.0:*
> 2120/rpc.statd

> never really get a definitive answer.  Is this a common message for
> chkrootkit, should I be worried?  Any help would be great, thanks in
> advance.

I got that message (with a different port) just because I was running imaps 
rather than normal imap.  chkrootkit seems to employ a bit of poetic license 
with its definition of "infected" ;)

-- 
Lee Braiden
http://DigitalUnleashed.com

What's so civil about war anyway?
                 -- Guns N' Roses

Reply to:

References:
- INFECTED (PORTS: 600)
  - From: "Morgan Walker" <jmw@M-CAM.COM>

Prev by Date: INFECTED (PORTS: 600)
Next by Date: password minimum days problem
Previous by thread: INFECTED (PORTS: 600)
Next by thread: Re: INFECTED (PORTS: 600)
Index(es):
- Date
- Thread