has my system been infected, or is prelink modifying my antivirus executable?
Elton Woo
elwoo at videotron.ca
Sun Dec 14 03:23:14 UTC 2003
On Sat, 2003-12-13 at 18:09, Gordon Messmer wrote:
> Elton Woo wrote:
> > ]$ antivir -s -z /home
> >
> > I wonder if prelink has modified the executable?
> > ... if not, this is VERY disquieting!
>
> It was probably modified by prelink. Check /etc/prelink.conf for a list
> of directories that prelink will examine.
... so I guess I was right in my presupposition. Thank you for
concurring. I've been advised that next prelink on rawhide would
have a blacklist flag, so I would be able to bypass prelinking
antivir. Though your reply is a bit belated, it's appreciated
nonetheless!
Elton ;-)
More information about the fedora-list
mailing list