[Preston] Linux anti virus

John C preston at mailman.lug.org.uk
Wed Sep 25 15:39:00 2002


Hi Wayne...
I've put chkrootkit on the server. I believe that I need to 'make' it. Do you know how to do this ???

John C


At 17:19 24/09/2002 +0100, you wrote:
>I noticed that there was a vunerabilty the other week with apache so i
>patched mine - Have you ran the chkrootkit to see if they have hacked
>the server? I'll have kapersky rpm on one of my disks if you want me to
>bring it to the meeting?? Ill be there for 8.30 - Im just downloading
>unreal 2003 demo for nix - 100 meg!
>
>Wayne
>On Tue, 2002-09-24 at 17:14, John C wrote:
>> Unfortunately they cannot tell me anything except that there is an apache virus coming out of my server. I cannot think of any other way it can propagate except via email.
>> The server does not allow relaying.
>> It is merely the fact that I was told that it is 'an apache virus' that is giving me cause for concern. Being a reponsible person I am reluctant to re-connect the server to see if it is still sending out a virus.
>> I do know that the server has been hacked by looking at my httpd.conf file. It has been changed.
>> 
>> John C
>> 
>> 
>> At 16:55 24/09/2002 +0100, you wrote:
>> >Have they told you if you are sending them through emails??
>> >If so how are you sending mails from a client workstation to this server
>> >- or you sending mails straight from the server??/
>> >
>> >Wayne
>> > On Tue, 2002-09-24 at 16:43, John C wrote:
>> >> Hi Wayne...
>> >> 
>> >> I have been told by my isp, who has been told by his isp, that my server is sending out a virus.
>> >> He has disconnected the server to avoid further problems.
>> >> The reason that I am seeking anti virus software is to check it out and make sure.
>> >> I don't want to connect it up again and then be caught out.
>> >> 
>> >> John C
>> >> 
>> >> At 15:37 24/09/2002 +0100, you wrote:
>> >> >How do you know you have a virus?? Kapersky has been pretty good for me
>> >> >you can download free version. 
>> >> >
>> >> >Wayne
>> >> >
>> >> >On Tue, 2002-09-24 at 15:24, John C wrote:
>> >> >> Seems that I have a virus on my Internet server. Does anybody know of any anti virus software that can detect and remove viruses from linux.
>> >> >> I am running RedHat 7.3
>> >> >> 
>> >> >> John C
>> >> >> 
>> >> >> =================================================
>> >> >> 
>> >> >>   Check out our British Country Music Web Sites 
>> >> >> 
>> >> >>         http://www.countrymusic.org.uk
>> >> >>         http://www.bcmi-radio.co.uk
>> >> >> 
>> >> >>         Over 70,000 visitors a week
>> >> >> 
>> >> >> =================================================
>> >> >> 
>> >> >> 
>> >> >> _______________________________________________
>> >> >> Preston mailing list
>> >> >> Preston@mailman.lug.org.uk
>> >> >> http://mailman.lug.org.uk/mailman/listinfo/preston
>> >> >> 
>> >> >
>> >> >
>> >> >
>> >> >_______________________________________________
>> >> >Preston mailing list
>> >> >Preston@mailman.lug.org.uk
>> >> >http://mailman.lug.org.uk/mailman/listinfo/preston 
>> >> 
>> >> =================================================
>> >> 
>> >>   Check out our British Country Music Web Sites 
>> >> 
>> >>         http://www.countrymusic.org.uk
>> >>         http://www.bcmi-radio.co.uk
>> >> 
>> >>         Over 70,000 visitors a week
>> >> 
>> >> =================================================
>> >> 
>> >> 
>> >> _______________________________________________
>> >> Preston mailing list
>> >> Preston@mailman.lug.org.uk
>> >> http://mailman.lug.org.uk/mailman/listinfo/preston
>> >> 
>> >
>> >
>> >
>> >_______________________________________________
>> >Preston mailing list
>> >Preston@mailman.lug.org.uk
>> >http://mailman.lug.org.uk/mailman/listinfo/preston 
>> 
>> =================================================
>> 
>>   Check out our British Country Music Web Sites 
>> 
>>         http://www.countrymusic.org.uk
>>         http://www.bcmi-radio.co.uk
>> 
>>         Over 70,000 visitors a week
>> 
>> =================================================
>> 
>> 
>> _______________________________________________
>> Preston mailing list
>> Preston@mailman.lug.org.uk
>> http://mailman.lug.org.uk/mailman/listinfo/preston
>> 
>
>
>
>_______________________________________________
>Preston mailing list
>Preston@mailman.lug.org.uk
>http://mailman.lug.org.uk/mailman/listinfo/preston 

=================================================

  Check out our British Country Music Web Sites 

        http://www.countrymusic.org.uk
        http://www.bcmi-radio.co.uk

        Over 70,000 visitors a week

=================================================