virus in suse10.2

cpink · 07-31-2007, 05:02 AM

Dear all,

I'm first in this forum. i have problem related to virus("_desktop.ini"). i was scan almost of day in suse10.2 by used avast or clamav program to scan but all of them can't delete it and not possible. does anybody have any ideas for this. :-)

Best Regards,
Cpink

pwc101 · 07-31-2007, 05:27 AM

What have you tried? You say you can't delete it, but which command did you try? Can you post any error messages you get when you do try?

The rm command is pretty powerful, and I have yet to come across a file I haven't been able to delete with it, but check the permissions on the file first. From the directory where the file is, as root, type

Code:

ls -l _desktop.ini

and post the output here.

cpink · 08-01-2007, 05:29 AM

Thanks, I tried to use Anti-virus application but i couldn't protect my computer at all. i can delete all of "_desktop.ini" by manual but when i reboot my pc it still appear in the same location. Anyway, these virus files are very similar to the plain text file. Hovering mouse on one of viruses will show a date which is the file accessed!

Best Regards,
Cpink

The_JinJ · 08-02-2007, 04:56 PM

Isn't this a Windows virus??
Are they marked as system files?

cpink · 08-06-2007, 08:58 PM

Hi Neil,
sorry am late, it's virus for windows. All files was not marked as system yet!
Thanks for your help
Cpink

cybertaz · 08-07-2007, 09:17 AM

the dekstop.ini files get recreated and updated every time a folder is accessed. that is how windows nows what is in the folder. What makes you think the file is infected? these files are usually hidden.