Hi guys,

I'm using CentOS 5.3 server with no server GUI and I am looking for a free AV. We have a YouTube-like application on our server called ClipHouse and I think there is a video that embedded malware into that part of the server. I've found the malware in a few index.php files. What do you think I should do?

Try clamav. The command, once it's installed, is "clamscan". Various options are available too, for instance,

"clamscan --detect-pua --detect-broken -r"

Here, you'll be detecting possibly unwanted applications, along with broken applications, and running it recursively. You can create a log file as well, with the option "-l" followed by a specified file: "-l /home/user/clamscanresult". More information on options is on it's manpage.

I doubt the malware was inserted from a video file, there are certainly enough other methods to alter php files remotely.

I think you should check to ensure your Cliphouse software is up to date, and the latest version.

Contact DZOIC and find out if there are any known vulnerabilities in their code that would allow your site to be compromised.

Check the install directions for Cliphouse that outline the configuration of your server, and ensure you have all the setting done properly in your PHP, Apache, and MySQL configs.

If you have any other PHP code on your website, ensure that it too is up to date and secure..