[CentOS] CleanLog.h

Fri Nov 30 13:28:29 UTC 2007
B.J. McClure <keepertoad at verizon.net>

On Fri, 2007-11-30 at 07:40 -0500, Alfredo Perez wrote:

> On Thu, Nov 29, 2007 at 04:43:44PM -0600, B.J. McClure wrote:
> > Sad to say one of my file servers was exploited and used to run a
> > Phishing scam.  Have identified subject virus amongst other things.  It
> > appears twice in a virus scan; /sbin/z (which I assume can just be
> > deleted) and /sys/bus/serio/drivers/atkbd/description.  The latter file
> > is also present in identical uninfected machines.  I have been unable to
> > open the file, even with root privileges, although it appears to be a
> > text file.  Any suggestions on how to proceed appreciated.  Guess I
> > could delete it and copy over the file from an identical machine.
> > 
> > Thanks in advance,
> > B.J.
> > 
> > CentOS 5.0, Linux 2.6.18-8.1.15.el5 x86_64 16:26:48 up 10:46, 1 user,
> > load average: 0.07, 0.08, 0.04
> 
> Hi Can you tell me which virus scan you are using?
> 
> Thanks


avg75flr-r49-a1130.i386.rpm

B.J.
CentOS 5.0, Linux 2.6.18-8.1.15.el5 x86_64 07:26:34 up 1 day, 1:45, 1
user, load average: 0.30, 0.13, 0.09
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/centos/attachments/20071130/1ae0de77/attachment-0005.html>