On Wed, 12 May 2004, N S Srikanth wrote: > I recently ran clamscan on my machine and th following is a > partial output.(Clamav 0.60) > > I run RH9 on a dual boot m/c with Win98 in another partition. > ------------------------------------------------ > //usr/bin/kmail: Exploit.Junksurf.A FOUND [snip about 100 other files] > ------------------------------------------------------------------------ > > Is this something serious? > > Some thing in my home directory I can accept, but some thing in my > system documentation directories too? > DO I have to reinstall RH LInux?
When I run clamscan (0.70) on my RH9 box I don't get those files listed, so there's definitely something fishy. Here's a check: astro: [20:31] [10] ~>md5sum /usr/bin/kmail df82e822af0ecb12a2e04f832144a87d /usr/bin/kmail If your md5sum matches mine, then your box is safe and it's clamav that's screwy. You should update to 0.70 and run freshclam to update your database, then try again. If your md5sum does NOT match, then reinstalling is probably your best option. Damian Menscher -- -=#| Physics Grad Student & SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| <[EMAIL PROTECTED]> www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers: |#=- -=#| UIUC CITES Security Group || Beckman Imaging Technology Group |#=- ------------------------------------------------------- This SF.Net email is sponsored by: SourceForge.net Broadband Sign-up now for SourceForge Broadband and get the fastest 6.0/768 connection for only $19.95/mo for the first 3 months! http://ads.osdn.com/?ad_id=2562&alloc_id=6184&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
