LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 02-26-2005, 10:54 AM   #1
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Rep: Reputation: 30
Worried I may have a virus


Although I've read viruses on Linux are rare, I just installed and ran F_Prot.
At the end of the scan it reported no infections but 2 supicious files.
I looked through the report and found this -
intel-536EP-2.56.76.0/coredrv/coredrv.o could be infected with an unknown virus
It was the same file reported twice but in 2 different locations (the actual driver and a backup I have).
The file in question is from the driver for my Intel 536ep modem. Now I did have to modify the driver a bit to make it work with the 2.6 kernel so could this be reason it has shown up are is it likely a virus?
I hope I don't have to delete the driver because it took me ages to get it working.
 
Old 02-26-2005, 12:24 PM   #2
jonr
Senior Member
 
Registered: Jan 2003
Location: Kansas City, Missouri, USA
Distribution: Ubuntu
Posts: 1,040

Rep: Reputation: 47
Could you obtain the original version of the driver and run it past F-Prot? If it checks out OK, then I would feel sure your modifications simply triggered a false positive. The fact that the word "unknown" appears might support that opinion, since F-Prot's files are kept well up-to-date (and I'm assuming you have the latest version).
 
Old 02-26-2005, 12:43 PM   #3
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Original Poster
Rep: Reputation: 30
As obvious as your suggestion was, I didn't think of it.
I tried scanning the original driver I download (with F-Prot updated today) and there were no infections or suspicious files so it is obviously the modifications.
Thanks for the help.
 
Old 02-26-2005, 12:48 PM   #4
jonr
Senior Member
 
Registered: Jan 2003
Location: Kansas City, Missouri, USA
Distribution: Ubuntu
Posts: 1,040

Rep: Reputation: 47
You're more than welcome!
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Should i be worried? teqno Linux - Hardware 2 09-17-2005 02:47 AM
I'm worried .... lesleyb SUSE / openSUSE 7 10-24-2004 03:43 AM
Boot virus or Anti-Virus? AVG Free Anti-Virus Software problems SparceMatrix Linux - Security 9 08-02-2004 02:35 PM
trend chipway virus detected boot virus rafc Linux - Security 1 05-13-2004 01:44 AM
Should I be worried?? 3inone Linux - Security 1 08-20-2003 04:23 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:03 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration