LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 03-24-2003, 10:05 AM   #1
XxAndyxX
Member
 
Registered: Mar 2003
Location: Houston, TX
Distribution: RedHat 8.0
Posts: 79

Rep: Reputation: 15
::Virus!::


I just put up my RH 8.0 server. And now I already got this bitchy little virus... I've had it before, and it's a bad one... But I never heard of it and the research I do, I don't get anything... This is what it does. It creates a Thumbs.db and it makes a million *.eml files... And when you try to delete it it just seems like it multiplies... Norton doesn't even pick up the virus. I can delete it but then it always seems to come back, can anyone give me some advice? I'd greatly appreciate it...

Thanks
- Andy
 
Old 03-24-2003, 10:33 AM   #2
mcleodnine
Senior Member
 
Registered: May 2001
Location: Left Coast - Canada
Distribution: s l a c k w a r e
Posts: 2,731

Rep: Reputation: 45
so your win clients get the virus by connecting to a samba share???
 
Old 03-24-2003, 10:37 AM   #3
XxAndyxX
Member
 
Registered: Mar 2003
Location: Houston, TX
Distribution: RedHat 8.0
Posts: 79

Original Poster
Rep: Reputation: 15
I used to have it on my windows server... Then I switch that server to a linux ... And now the virus is back again, effected all the subdirectories of the server.
 
Old 03-24-2003, 10:42 AM   #4
mcleodnine
Senior Member
 
Registered: May 2001
Location: Left Coast - Canada
Distribution: s l a c k w a r e
Posts: 2,731

Rep: Reputation: 45
No. the _client_ pc's have the virus and are writing it to the shared volumes on the server.
 
Old 03-24-2003, 11:03 AM   #5
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,331
Blog Entries: 55

Rep: Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529
Thumbs.db ain't a virus AFAIK, it's there cuz Wintendo users don't disable their image caching. You're sposed to get rid of 'em by adding the "(delete) veto files" statements to your Samba config.
 
Old 03-24-2003, 11:49 AM   #6
mcleodnine
Senior Member
 
Registered: May 2001
Location: Left Coast - Canada
Distribution: s l a c k w a r e
Posts: 2,731

Rep: Reputation: 45
http://www.annoyances.org/exec/forum/winxp/r1044071169

Still can't figure out what's up with the 'million *.eml files' except to say that it sounds very Outlook-ish.
 
Old 03-24-2003, 02:22 PM   #7
XxAndyxX
Member
 
Registered: Mar 2003
Location: Houston, TX
Distribution: RedHat 8.0
Posts: 79

Original Poster
Rep: Reputation: 15
Yeah, it's a bad virus... What it does is that it takes a bunch of files in you computer and makes it into a .eml... ie, I had a file named events.txt and then I started getting a million events.eml and I had a file called andy.txt, then I started getting a bunch of andy.eml... I was starting to think that it was stored in my BIOS since I've formatted so many times... Did any of y'all think that could be it? And I might have to reinstall RedHat... While I'm here, what is the command to delete a folder with all it's contents? Because whenever I use rmdir it always says that I need to delete everything in there... What's the command to just delete everything in there?
Thanks
-Andy
 
Old 03-24-2003, 09:36 PM   #8
Texicle
Member
 
Registered: Oct 2002
Location: Northern Ontario, Canada
Distribution: Slackware 10.0
Posts: 789

Rep: Reputation: 30
rmdir --ignore-fail-on-non-empty <dir name>

Just to let you know, it will get rid of everything in it. man rmdir for more. Hope this helps.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Virus' metallicafan_316 Linux - Newbie 5 07-19-2005 06:37 PM
virus phoenix7 Linux - Security 4 02-22-2005 06:07 AM
Boot virus or Anti-Virus? AVG Free Anti-Virus Software problems SparceMatrix Linux - Security 9 08-02-2004 03:35 PM
trend chipway virus detected boot virus rafc Linux - Security 1 05-13-2004 02:44 AM
I think I have a virus! Jordanl Linux - General 3 02-07-2003 06:37 PM


All times are GMT -5. The time now is 01:06 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration