@related : [[Spy]] [[Virus]]



==== Rootkit ====

I have a [[mem]] bug , so I checked for trojans :

  $ chkrootkit
  Checking `bindshell'... INFECTED (PORTS:  4000 6667)
  $ netstat -a  | grep 4000
  tcp        0      0 *:4000                  *:*                     LISTEN
  $ lynx -head -dump http://localhost:4000
  $ nc localhost 4000
  Welcome to MLDonkey 2.9.0
  Welcome on mldonkey command-line

  $ sudo rkhunter  -c  
  Scanned files: 342
  Possible infected files: 0
  Application scan
  Vulnerable applications: 0

Ok there no reason to panic, just in case :
  sudo aptitude reinstall mldonkey-server bitlbee host dnsutils libbind9-30


  * http://forum.psoft.net/showthread.php?t=16011

==== Misc  ====

[[ACPI]] : http://www.clubic.com/actualite-31406-les-rootkits-pourraient-s-attaquer-aux-bios.html