[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: F12 Rkhunter, Have I a rootkit?



Frank Murphy (Frankly3D) wrote:
On 05/01/10 11:06, Andrew Haley wrote:
On 01/05/2010 10:54 AM, Frank Murphy (Frankly3D) wrote:
---------------------- Start Rootkit Hunter Scan ----------------------
Warning: Network TCP port 47107 is being used by
/usr/lib64/thunderbird-3.0/thunderbird-bin. Possible rootkit: T0rn
         Use the 'lsof -i' or 'netstat -an' command to check this.


Results of lsof -i' and 'netstat -an'
http://fpaste.org/xOOO/
Port 47107 isn't being used any more.  This was just TCP using a random
unreserved port.

Andrew.


Basically ignore this in future, with that port?

Absolutely not! If you ever get it again check it again. Learn how to do that, lsof is not rocket science.

--
Bill Davidsen <davidsen tmr com>
  "We have more to fear from the bungling of the incompetent than from
the machinations of the wicked."  - from Slashdot


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]