ethtool trojan detected by NAI

[Alexandre Strube]

Em Qui, 2004-01-15 às 13:31, Jason Montleon escreveu:
> I caught output of my virusscan stating that /sbin/ethtool was a trojan or
> variant Linux/Exploit last night after updating to the new DAT files.  By
> default the virus scan moves the files to a folder I've specified, so I
> double checked that /sbin/ethtool did in fact no longer exist, downloaded
> the (presumably clean RPM from
> http://download.fedora.us/fedora/fedora/1/i386/RPMS.os/, (couldn't find and
> md5sum for the rpm to compare against; perhaps just didnt try hard enough)
> rpm --force -ivh ethtool* and this is what I got:

#antivir /sbin/ethtool
AntiVir / Linux Version 2.0.9-12
Copyright (c) 1994-2003 by H+BEDV Datentechnik GmbH.
All rights reserved.
 
Loading /usr/lib/AntiVir/antivir.vdf ...
 
VDF version: 6.23.0.33 created 16 Jan 2004
 
For private, non-commercial use only.
AntiVir license: 1001045498 for Alexandre Strube, Salvador
----- scan results -----
 directories:        0
       files:        1
      alerts:        0
   scan time: 00:00:01
------------------------
Thank you for using AntiVir.

-- 
[]s

Alexandre Ganso 
500 FOUR vermelha - Diretor Steel Goose Moto Group