Hello list, can anyone explain me what this is? I found it in "Local Weekly Security"-output. This server whith SuSE 8.1 is 2 days up and nobody except me should knows about it. The following files are suid/sgid: + drwx------ 16 root root 4096 2003-03-17 00:36 . . . . The following devices were added: + drwx------ root root 4096 Mar I have seen this and I run additionaly chkrootkit with the following result. I think this is an false alert. Checking `bindshell'... INFECTED (PORTS: 465)