Re: F12 Rkhunter, Have I a rootkit?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Frank Murphy (Frankly3D) wrote:
On 05/01/10 11:06, Andrew Haley wrote:
On 01/05/2010 10:54 AM, Frank Murphy (Frankly3D) wrote:
---------------------- Start Rootkit Hunter Scan ----------------------
Warning: Network TCP port 47107 is being used by
/usr/lib64/thunderbird-3.0/thunderbird-bin. Possible rootkit: T0rn
         Use the 'lsof -i' or 'netstat -an' command to check this.


Results of lsof -i' and 'netstat -an'
http://fpaste.org/xOOO/
Port 47107 isn't being used any more.  This was just TCP using a random
unreserved port.

Andrew.


Basically ignore this in future, with that port?

Absolutely not! If you ever get it again check it again. Learn how to do that, lsof is not rocket science.

--
Bill Davidsen <davidsen@xxxxxxx>
  "We have more to fear from the bungling of the incompetent than from
the machinations of the wicked."  - from Slashdot

--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux