Re: Virus on a virgin Red Hat ES V3 server?

From: Manuel Nauta (mnauta_at_cisaustin.org)
Date: 05/07/04

  • Next message: Robert C Paulsen Jr: "hostname -- how is it set?"
    To: General Red Hat Linux discussion list <redhat-list@redhat.com>
    Date: Fri, 07 May 2004 13:24:56 -0500
    
    

    kcore is an image of your system memory. Carefull, if you
    "clean" that your system will crash. Maybe it's a false
    positive. I would check the RedHat knowledgebase you do
    anything.

    ----- Original Message Follows -----
    > I've just installed RedHat Enterprise ES V3 and patched to
    > the latest revision. I then installed Clam Anti-Virus
    > 0.70, ran freshclam to get the latest def files and then
    > ran a clamdscan against the entire drive.
    > I was surprised when clamdscan reported:
    >
    > //proc/kcore: Trojan.MiniCommander.dr FOUND
    >
    > What's the possibility that the server is really infected?
    > It's been up just about two days, behind an commercial
    > grade ICSA-certified firewall with only outbound access to
    > the internet.
    > Does anyone else have a RHES V3 box that they can try?
    >
    > I wonder if the infected file ships with the RH
    > distribution???
    > Any suggestions are appreciated.
    >
    >
    > --
    > redhat-list mailing list
    > unsubscribe
    > mailto:redhat-list-request@redhat.com?subject=unsubscribe
    > https://www.redhat.com/mailman/listinfo/redhat-list

    -- 
    redhat-list mailing list
    unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
    https://www.redhat.com/mailman/listinfo/redhat-list
    

  • Next message: Robert C Paulsen Jr: "hostname -- how is it set?"

    Relevant Pages

    • Re: Spring into action with Red Hat training
      ... > I keep on looking at the Redhat website to see if prices are going down, ... Enroll now for most spring training ... > Do you Yahoo!? ... -- redhat-list mailing list unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe ...
      (RedHat)
    • Solved: Urgent!! After installation of RedHat 9, I can`t do login
      ... Asunto: Urgent!! ... I've installed RedHat 9, and after installation, the system run ... -- redhat-list mailing list unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe ...
      (RedHat)
    • RE: Redhat 8/9 LDAP for Outlook 2000/XP
      ... Redhat 8/9 LDAP for Outlook 2000/XP ... Do you Yahoo!? ... -- redhat-list mailing list unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe ...
      (RedHat)
    • RE: How can I create ext3 file system on Redhat AS 2.1
      ... Drew ... Does any one know how to create ext3 file system on Redhat Advance ... -- redhat-list mailing list unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe ...
      (RedHat)