[KLUG Members] chkrootkit returned a positive - Uh-oh... What do I do?

Adam Williams members@kalamazoolinux.org
20 Sep 2002 11:51:35 -0400


>Nevermind.  rpc.statd was running on port 1008 becuase I initially
>thought I would most likely wind up using this box as a NFS server.  I
>didn't, but forgot to shut down nfs services.
>Digging around, I found it, and shut it down.  Whew.

"netstat -ap" is your friend.