`bindshell'... INFECTED (PORTS: 4000) ?

AgoraHosting

Verified User
Joined
Apr 7, 2004
Messages
12
Hello,

My ChkRootKit report has this specific line

Checking `bindshell'... INFECTED (PORTS: 4000)

I checked the server but couldn't understand why it thinks that PORT 4000 is infected. Can this be a false alert?

Rkhunter doesn't find any infections or warnings.
Furthermore, port 4000 is closed by the firewall.

Thanks in advance!
 
bindshell often comes up with false positives. Google is your friend.

Jeff
 
Thank you for the reply.
However, I couldn't find a reasonable answer in my Google search for this issue...

That's why I posted on DirectAdmin forum.
 
Back
Top