Question on cpanel and rootkit
I have recently used rootkit and noticed the following message:
Checking `bindshell'... INFECTED (PORTS: 465)
I don't beleive this is normal. Does anyone have any advise on what steps to take? I have checked system logs for discrepencies but do not know what else to do.
I am looking into installing tripwire, but am unsure how well this works with cpanel installed (and as I understand it, tripwire should be installed on a clean system).
Any help would be greatly appreciated.
