[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Checking `bindshell'... INFECTED (PORTS: 3049)



Thanks for all.
As i can see from "netstat -tulpe" ,it is cfsd(cfs daemon from the cfs packet(crypt filesystem)).
(By the way , "# telnet localhost 3049" returns "conection refused")
Of course , i am ashamed  , but why this takes place ?
Bug in the chkrootkit or in the cfs ?
Killing cfsd makes report clear,but i suppose it is not a solution .

--
With best regards , Yura .



Reply to: