has my system been infected, or is prelink modifying my antivirus executable?

Elton Woo elwoo at videotron.ca
Sun Dec 14 03:23:14 UTC 2003


On Sat, 2003-12-13 at 18:09, Gordon Messmer wrote:
> Elton Woo wrote:
> > ]$ antivir -s -z /home

> > 
> > I wonder if prelink has modified the executable?
> > ... if not, this is VERY disquieting!
> 
> It was probably modified by prelink.  Check /etc/prelink.conf for a list 
> of directories that prelink will examine.
... so I guess I was right in my presupposition. Thank you for
concurring. I've been advised that next prelink on rawhide would
have a blacklist flag, so I would be able to bypass prelinking 
antivir. Though your reply is a bit belated, it's appreciated
nonetheless!

Elton ;-)





More information about the fedora-list mailing list