Gentoo Archives: gentoo-server

From: Eric Brown <airuike@×××××.com>
To: gentoo-server@l.g.o
Subject: Re: [gentoo-server] Chkrootkit report port 465 INFECTED
Date: Sun, 26 Mar 2006 18:58:18
Message-Id: d5b293290603261054m7d6cac7l4d097f2dda7349a2@mail.gmail.com
In Reply to: [gentoo-server] Chkrootkit report port 465 INFECTED by "王 鹏辉"
1 use rkhunter instead of chkrootkit :)
2
3 On 3/24/06, Íõ Åô»Ô <wangpenghui@×××××.com> wrote:
4 > Hello, list,
5 >
6 > Recently, i found that my emails server has sent out mess spam emails by
7 > some strange account from xxx@×××××.com. I run chkrootkit then found that
8 >
9 > bindshell INFECTED (PORTS: 465)
10 >
11 > I don't know what's wrong with it? And i STFW for a while, but there is no
12 > result.
13 >
14 > Could someone with experience pick me up?
15 >
16 > Thanks very much.
17 >
18 > Wang.
19 >
20 > --
21 > Íõ Åô»Ô
22 > 0592-8389650
23 >
24
25 --
26 gentoo-server@g.o mailing list