LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   virus found! (https://www.linuxquestions.org/questions/linux-newbie-8/virus-found-587102/)

tferero 09-24-2007 08:34 PM

virus found!
 
I just ran Aegis and it found virus in several dll files in the crossover office folder - I downloaded this from the crossover website. What should I do with these - delete or quarantine? Will this cause problems to things not running right? This is what Aegis reported:

medcat.dll >> w32/magistr.a@MM
msgr2en.dll >>w32/magistr.a@MM
msjro.dll >> w32/magistr.a@MM

I am surprised to see this as I assumed Crossover would have clean installs

JZL240I-U 09-25-2007 04:37 AM

Did you mail the crossover site and ask them?

almatic 09-25-2007 04:49 AM

check those dll's here: http://www.virustotal.com/

Most probably this is false alarm caused by aegis, which does not give reliable results.

jay73 09-25-2007 05:43 AM

You can always get a second opinion by installing, say, f-prot.

tferero 09-25-2007 08:55 AM

Thanks!
 
Thanks everyone for the replies...

Crossover's website had a searchable database of questions/problems, and it would seem that there are a number of false positive readings with various windows based viruses. I didn't find an answer to this one specifically, but I am reasonably assured that its nothing to worry about.

Almatic, thanks for the website - this is a great tool! I am still trying to locate the actuall dll files - when I run find files in kubuntu, it doesn't give me the full path, so I am wondering if they are in a hidden folder somewhere... will work on that later when I get home from work.

Jay73, I tried downloading f-prot (both in Adept and from the website) but the installation failed. From the website I downloaded the .deb version, but I got error messages in the install. Are there known dependencies that I should look for? As a newbie, I still have trouble with installs.

Thanks...

bigrigdriver 09-25-2007 09:21 AM

Quote:

Jay73, I tried downloading f-prot (both in Adept and from the website) but the installation failed. From the website I downloaded the .deb version, but I got error messages in the install. Are there known dependencies that I should look for? As a newbie, I still have trouble with installs.
Adept should satisfy the dependencies for you, assuming the packages are in the repositories listed in your /etc/apt/sources.list.

1. try to install f-prot again. Write down error messages relating to failed depencencies.

2. www.google.com/linux to search for those depencent packages.

3. add the locations of those packages to your sources.list, then try again to install f-prot.

JZL240I-U 09-25-2007 09:25 AM

Quote:

Originally Posted by tferero (Post 2903119)
...I am still trying to locate the actuall dll files - when I run find files in kubuntu, it doesn't give me the full path...

Try the command "locate". Maybe the command "updatedb" issued once before the "locate" is necessary. And as always there are the man pages for more information ;).

tferero 09-25-2007 08:53 PM

Follow up on f-prot
 
Just as a follow-up, I tried reinstalling f-prot, and what a problem that was! The install failed (froze up) midstream and I had to close adept. What a problem that created! Adept refused to run, and when it did open (after a reboot) it said that I had read only rights because another process was using the packager. To make a really long story short, I finally realized that the only fix (after trying lots of other things found on various boards) was to uninstall the programs at the command line.

What turned out to be an easy fix took me forever to arrive at. At various points I got adept to run (I still don't exactly know how). When I tried to install something else as a test, I realized that adept tried to finish any broken downloads with the next download. It was essentially stuck on trying to grab the f-prot file every time. I could not find a way to tell it to give up on this file.

For anybody a similar situation, the command was simple:
sudo dpkg -r filename. For other newbies, keep in mind that this command line is for kubuntu with kde. Others are probably different.

I have no idea why f-prot would not install properly - I definitely have run the update manager often enough to ensure current info. Based on some of the error messages, it seemed like the ftp address it was pointing to was incorrect.

If anyone has encountered this and has something to offer, I would be grateful, because I really wanted to try this program.


All times are GMT -5. The time now is 04:59 PM.