I am wondering what I should do. The virus is from the NutCracker family. I use avast antivirus.

I am on windows right now so I dunno if I should leave it or delete it.

the name of the file is



Can anybody help?

Man the m5d sum in the folder I downloaded was

9a0e09366da25e55fdba3fe1bed76a23

the accuall iso md5 is

a2107b27fe8b427e934ef99623851c95

Report it to whoever you report these things to.

Well I just emailed somebody at slackware since they are hosting the torrents and it's kinda impossible to play with a torrent and put a virus in it.

According to

ftp://ftp.slackware.com/pub/slackwar...all-d2.iso.md5

the md5sum is: 9a0e09366da25e55fdba3fe1bed76a23 slackware-10.1-install-d2.iso

That's the same as the file I downloaded via Bittorrent.

Either both are compromised or you have a bad md5 file. No way for me to know which is the case. I don't have anti-virus on my Slack box (for obvious reasons). There is a high probability that you have a false positive from your AV program. I'm sure a lot of code that KDE uses might look like a Windows virus according to heuristics.

Well I am just going to go ahead and burn them since I won't be running them just burning onto cd and then using with linux which as we all know, windows virus's do nothing to linux.

I also finished the first cd and the md5 sum is also wrong.

weird stuff.

Just don't install kde-i18n-pa-3.3.2-noarch-1.tgz if your antivirus reports only it
(Punjabi language support for KDE)

I won't but a windows antivurs caught this virus, not a linux one. Windows virus's don't do anything to linux.

lol

A couple of things (from being an unofficial mirror of slackware):

Where did you download the .torrent files from?
Did you use the format `md5sum -c slackware-10.1-install-d1.iso.md5` (et. al for the other iso's)?, if not, please do, and make sure you get an "OK" output. Just to double check, you may want to download the .md5 files from a trusted source. slackware.com/osuosl/tds/vtu (myself, although I'm rather low on the bandwidth meter).
And Lastly,
Who did you "email at slackware"?

Silly rumors start from posts like this, so please be wary of what you say, people may actually believe it without any proof.

If you can post your answers to the questions above that would be great, hopefully you don't feel offended that I might be asking silly questions, but it would be good to know where the source of the problems are.

Thanks,
ex

p.s.

pub/mirrors/slackware/slackware-10.1-iso$ find -name "*.iso" -exec md5sum {} \;
d4f98d815fbd94488abf33f7db0df820 ./slackware-10.1-install-d1.iso
9a0e09366da25e55fdba3fe1bed76a23 ./slackware-10.1-install-d2.iso
f8dd411e7f2d7ec7d0fc878487b8007b ./slackware-10.1-source-d3.iso
f1715933c42f9e21be59ff9ec293af1a ./slackware-10.1-source-d4.iso

pub/mirrors/slackware/slackware-10.1-iso$ cat *.md5
d4f98d815fbd94488abf33f7db0df820 slackware-10.1-install-d1.iso
9a0e09366da25e55fdba3fe1bed76a23 slackware-10.1-install-d2.iso
f8dd411e7f2d7ec7d0fc878487b8007b slackware-10.1-source-d3.iso
f1715933c42f9e21be59ff9ec293af1a slackware-10.1-source-d4.iso

If need be, run `gpg --verify foo.asc` on each of the iso's, to re-check them.

All else fails, rsync your 10.1-iso's with one of the mirrors, official or unofficial(those listed on alphageek's web site) and you should be set afterwards.

Ok. I am on windows do I didn't use any of those commands for checking the md5. I used a program called winMd5Sum

I got the torrents from slackware.com

I emailed the tech support at slackware to let them know, which was support@slackware.com

I checked the md5 sums of all the cd's and they were all wrong.

I burnt the images to cd and installed 10.1 with no problems.

I scanned the ISO files with housecall from trendmicro and they showed it didn't have a virus.

Also 1 more thing. I was on WINDOWS when my virus scanner said it was a virus. I wasn't on linux. If you are on linux, you don't have to worry since windows virus do nothing to linux.

Just to clear up a few things. I wasn't trying to scare anybody. I was just asking what to do.

btw I never got a reply from slackware yet

edit: I am not offended that you asked me those questions. I am happy to give you a reply.

i think either your antivirus is showing a false positive, or your windows os is infected and somehow infecting your ISO as it is downloaded to your computer...

i downloaded the same ISOs thru bittorrent from Slackware.com yesterday and my MD5s match...

P.S. i do not have windows as i consider it too vulnerable to be allowed on my computers...

MS-Windows = Bad Karma

Well I emailed the antivurs yesterday about it and they said it's common and it is a false positive and it happens because some of the coding in kde sets off the antivurs and there is nothing really they can do about it because if they take that virus definition out, some virus's will be able to pass the antivirus.

Glad to have it all resolved

A lkikely excuse.

"Windows" antivirus, as in Microsoft? I'm surprised it didn't say the whole ISO was one big virus.



Glad everything is working alright. Me, I just updated the image on my NFS server and did a reinstall (from scratch) on my laptop. Didn't like the drive configuration anyway, and figured it was as good a time as any to fix it. The only weird thing I'm getting is on first boot, insmod complaining about a whole bunch of files with improper configuration. probably not something I really need to worry about, and I'm not in front of the laptop to fix it anyway.