Virus on a virgin Red Hat ES V3 server?

Manuel Nauta mnauta at cisaustin.org
Fri May 7 18:24:56 UTC 2004


kcore is an image of your system memory. Carefull, if you
"clean" that your system will crash. Maybe it's a false
positive. I would check the RedHat knowledgebase you do
anything.



----- Original Message Follows -----
> I've just installed RedHat Enterprise ES V3 and patched to
> the latest revision.  I then installed Clam Anti-Virus
> 0.70, ran freshclam to get the latest def files and then
> ran a clamdscan against the entire drive. 
> I was surprised when clamdscan reported:
> 
> //proc/kcore: Trojan.MiniCommander.dr FOUND
> 
> What's the possibility that the server is really infected?
>  It's been up just about two days, behind an commercial
> grade ICSA-certified firewall with only outbound access to
> the internet. 
> Does anyone else have a RHES V3 box that they can try?
> 
> I wonder if the infected file ships with the RH
> distribution??? 
> Any suggestions are appreciated.
> 
> 
> -- 
> redhat-list mailing list
> unsubscribe
> mailto:redhat-list-request at redhat.com?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list





More information about the redhat-list mailing list