////usr/lib/kde3/kfile_ps.so: Exploit.Linux.Gv FOUND ////usr/lib/kde3/gsthumbnail.so: Exploit.Linux.Gv FOUND ////usr/lib/libgs.so.7.07: Exploit.Linux.Gv FOUND ////usr/lib/libkghostviewlib.so.0.0.0: Exploit.Linux.Gv FOUND
I start the procmail process and a mail with those lines appears on my inbox (with subject "Virus found"), i'm running clamd too, but i dont know if this files could be infected by a virus
On Tue, 2006-11-14 at 09:00 -0300, Departamento de Informatica wrote:
////usr/lib/kde3/kfile_ps.so: Exploit.Linux.Gv FOUND ////usr/lib/kde3/gsthumbnail.so: Exploit.Linux.Gv FOUND ////usr/lib/libgs.so.7.07: Exploit.Linux.Gv FOUND ////usr/lib/libkghostviewlib.so.0.0.0: Exploit.Linux.Gv FOUND
I start the procmail process and a mail with those lines appears on my inbox (with subject "Virus found"), i'm running clamd too, but i dont know if this files could be infected by a virus
---- try...
rpm -V ghostscript
and see if anything has changed from the original installation
Craig
the result of the comand rpm -V ghostscript
prelink: /usr/bin/gs: Could not find one of the dependencies prelink: /usr/bin/gs: at least one of file's dependencies has changed since prelinking S.?...... /usr/bin/gs missing /usr/lib/libgs.so.7.07
should i remove ghostscript?? there's any method to repair the installation ?
2006/11/14, Craig White craigwhite@azapple.com:
On Tue, 2006-11-14 at 09:00 -0300, Departamento de Informatica wrote:
////usr/lib/kde3/kfile_ps.so: Exploit.Linux.Gv FOUND ////usr/lib/kde3/gsthumbnail.so: Exploit.Linux.Gv FOUND ////usr/lib/libgs.so.7.07: Exploit.Linux.Gv FOUND ////usr/lib/libkghostviewlib.so.0.0.0: Exploit.Linux.Gv FOUND
I start the procmail process and a mail with those lines appears on my inbox (with subject "Virus found"), i'm running clamd too, but i dont know if this files could be infected by a virus
try...
rpm -V ghostscript
and see if anything has changed from the original installation
Craig
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
You ***might*** want to try a heavy handed approach of downloading and re-installing via --force method the ghostscript rpm but I would definitely want to know how/why these packages changed from the original installation because that would bother me.
You also might want to check the integrity of your system...
rpm -Va > /tmp/package_check.txt
and/or some kind of chkrootkit package for piece of mind.
Craig
On Tue, 2006-11-14 at 10:38 -0300, Departamento de Informatica wrote:
the result of the comand rpm -V ghostscript
prelink: /usr/bin/gs: Could not find one of the dependencies prelink: /usr/bin/gs: at least one of file's dependencies has changed since prelinking S.?...... /usr/bin/gs missing /usr/lib/libgs.so.7.07
should i remove ghostscript?? there's any method to repair the installation ?
2006/11/14, Craig White craigwhite@azapple.com:
On Tue, 2006-11-14 at 09:00 -0300, Departamento de Informatica wrote:
////usr/lib/kde3/kfile_ps.so: Exploit.Linux.Gv FOUND ////usr/lib/kde3/gsthumbnail.so: Exploit.Linux.Gv FOUND ////usr/lib/libgs.so.7.07: Exploit.Linux.Gv FOUND ////usr/lib/libkghostviewlib.so.0.0.0: Exploit.Linux.Gv FOUND
I start the procmail process and a mail with those lines appears on my inbox (with subject "Virus found"), i'm running clamd too, but i dont know if this files could be infected by a virus
try...
rpm -V ghostscript
and see if anything has changed from the original installation
Craig
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Tue, Nov 14, 2006 at 09:00:41AM -0300, Departamento de Informatica wrote:
////usr/lib/kde3/kfile_ps.so: Exploit.Linux.Gv FOUND ////usr/lib/kde3/gsthumbnail.so: Exploit.Linux.Gv FOUND ////usr/lib/libgs.so.7.07: Exploit.Linux.Gv FOUND ////usr/lib/libkghostviewlib.so.0.0.0: Exploit.Linux.Gv FOUND
I start the procmail process and a mail with those lines appears on my inbox (with subject "Virus found"), i'm running clamd too, but i dont know if this files could be infected by a virus
False positive.
clamav devel-20060426 will correctly detect is as a clean file.
[]s
- -- Rodrigo Barbosa "Quid quid Latine dictum sit, altum viditur" "Be excellent to each other ..." - Bill & Ted (Wyld Stallyns)
-
Craig White -
Departamento de Informatica -
Rodrigo Barbosa