System infected ?

[Michael Schwendt]

On Mon, 7 Dec 2009 14:38:20 +0100, Frank wrote:

> On Mon, 07 Dec 2009 14:32:50 +0100 Luc MAIGNAN wrote:
> > Hi,
> > 
> > I launched a 'chkrootkit' on my mail server and it gave me the following 
> > error :
> > 
> > Checking `bindshell'... INFECTED (PORTS:  465)
> > 
> > 
> > I think that isn't a problem because a use this port with postfix as SMTPS.
> 
> Take it als "false positive". I've the same with exim.

What do you expect from a simple test whether a port is used? ;)
Don't overestimate chkrootkit.