Re: [rhn-users] virus?

["Jon Branch" <jon_branch email com>]

Hi Carel

I suggest you go to www.sophos.com and download the trial version of their anti-virus for Linux. Make sure you get the "linux on intel using libc6 (glibc 2.2)" version and follow the instructions to install it. On a first install you have to create a new user for Sophos "sweep" who is a member of the group sweep and who cannot login at a shell. (edit /etc/passwd and set the sweep user's shell to /bin/false). Then "sweep" your system, use the command;-

sweep -all /

whilst logged in as root.

That will determine if your system has been compromised or not.

Linux is highly virus resistant, but it most certainly isn't virus proof. One essential protection is to apply security patches, and, if you are a member of rhn, Red Hat will email you notifications of new patches as soon as they are available: Or of course you can have the update notification icon on a Gnome bar on your desktop.

Regards

Jon Branch
----- Original Message -----
From: carel scheffer <cl scheffer quicknet nl>
Date: Mon, 06 Oct 2003 14:46:45 +0200
To: rhn-users redhat com
Subject: [rhn-users] virus?

> Hello,
> 
> I run Red Hat 9 with the graphical interface, using gnome. All was well and 
> running fine until about two weeks ago. My usual login (domain address of 
> my provider) was suddenly replaced by something or someone by the name 
> 'alopa' , and I got the warning that the address 'alopa' was not found, 
> advising to add 'alopa' to the 'hosts' file. Meanwhile the working of gnome 
> and of my printer were disturbed.
> I have not been able to locate anything (file, programme) by the name 
> alopa. Meanwhile I found that 'alopa' figures in the virus definitions of 
> Norton antivirus library. But my Norton programme is on my windows 
> partition so I cant possibly use it to attack the problem.
> 
> Can anyone help me out? Is this indeed a virus and what can I do about it?
> 
> carel scheffer
> 
> 
> 
> _______________________________________________
> rhn-users mailing list
> rhn-users redhat com
> https://www.redhat.com/mailman/listinfo/rhn-users
>