Re: Checking `bindshell'... INFECTED (PORTS: 3049)

From: George Alexandru Dragoi (waruiinu_at_gmail.com)
Date: 09/28/05

  • Next message: Antonio Rodriguez: "Re: Debian Kernel 2.6.12 and parallel port problems." 
    Date: Wed, 28 Sep 2005 11:30:09 +0300
To: debian-user@lists.debian.org

    Try telnet-ing to that port

    $ telnet localhost 3049

    On 9/28/05, Dennis Stosberg <lists@stosberg.net> wrote:
    >
    > Am 28.09.2005 um 09:45 schrieb deb@nerdshack.com:
    >
    > > Good time for all.
    > >
    > > I run chkrootkit and it returns :
    > > ...
    > > Checking `bindshell'... INFECTED (PORTS: 3049)
    > > ...
    > >
    > > What I need to do ? Links are welcome.
    >
    > You will probably want to find out, whether your system is infected
    > or not. The chkrootkit tool regularly produces false alarms.
    >
    > Find out, which process has opened that port. "netstat -tulpe" will
    > show you all processes which listen on a tcp or udp port. You need
    > to run this as root.
    >
    > Regards,
    > Dennis
    >
    > --
    > Send personal mail to dennis@... only. Off-list
    > mails to lists@stosberg.net will not reach me.
    >
    >
    > --
    > To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
    > with a subject of "unsubscribe". Trouble? Contact
    > listmaster@lists.debian.org
    >
    > 

    --
Bla bla
-- 
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  • Next message: Antonio Rodriguez: "Re: Debian Kernel 2.6.12 and parallel port problems."

    Relevant Pages

    • Re: Changing iptables on the fly
      ... change port numbers daily... ... we can check personal mail, and so on - it's actually how I'm posting ... But these systems have no removable media drives, ... privileges on the company systems. ...
      (comp.security.firewalls)
    • Re: Port scan from grc.com fails 1st time passes the 2nd?
      ... For example port 80 would be open on your ... error message to a host that is trying to reach a closed port. ... $ telnet localhost 21 ... Most home firewalls default to logging connection attempts, ...
      (comp.security.firewalls)
    • Re: telnet localhost
      ... > Connecting To localhost...Could not open connection to the host, ... Do you really have a service or application listening on port 23? ...
      (microsoft.public.win32.programmer.networks)
    • RE: XP Pro & IIS connecting to localhost
      ... Go to the command prompt and type "telnet localhost 80" ... is not running or listning on a different port. ... that the IIS is listning with ISM snap-in. ...
      (microsoft.public.windowsxp.network_web)
    • Re: X server not reponding
      ... Dan Track kirjoitti viestissään (lähetysaika torstai, ... kesäkuuta 2005 14:08): ... > telnet localhost 6000 ... > I can't connect to the port even though I'm logged into X. Can ...
      (Fedora)