[ale] Virus scan

[Nick Travis]

Thanks for the help, I do have a /root.dead.letter,  /var/spool/mail/root is
21k, when I go into the mqueue folder there is one file listed, from the
spool diretory it's 4.0k(not sure if that's what you need), when reading off
my linux box i use pine, I use outlook, most of the time though, this is the
only process that looked out of place to me, but I easily could have missed
one "8280 ?        S      0:00 /tmp/.bugtraq 80.218.69.102"

Thanks Again!
----- Original Message -----
From: "Jim Popovitch" <jimpop at rocketship.com>
To: ale at ale.org
To: <ale at ale.org>
Sent: Monday, December 02, 2002 8:42 PM
Subject: RE: [ale] Virus scan


> Hi Nick, kudos for trying to help yourself out rather than walking away
from
> a problem.
>
> I suspect that you may just be forwarding an infected email, does that ISP
> (can you identify them) say that this is a recurring issue?
>
> Check for these files.. and let me know if they exist:
>
> /root/dead.letter     (file size and date)
> /var/spool/mail/root  (what is the file size)
> /var/spool/mqueue/*   (how many files are there)
>
> What program do you use to read email (netscape, pine, mutt, etc)?
>
> Do 'ps ax' and check for any processes that you don't recognize.. don't be
> afraid to ask for help on the ones you don't know.
>
>
> -Jim P.
>
> > -----Original Message-----
> > From: Nick Travis
> > Sent: Monday, December 02, 2002 7:51 PM
> > To: ale at ale.org
> > Subject: Re: [ale] Virus scan
> >
> >
> > here's what i've been able to find, I think it's
> > Linux/Slapper.worm.b, I got
> > an email from my ISP saying they have been getting complaints and that
it
> > was probably due to a virus of some kind, i recieved a strange email in
my
> > root directory, and a friend told me it was probably this worm.
> > Thanks for
> > the help.
> > ----- Original Message -----
> > From: "Dow Hurst" <dhurst at kennesaw.edu>
> > To: <ale at ale.org>
> > Sent: Monday, December 02, 2002 7:50 PM
> > Subject: Re: [ale] Virus scan
> >
> >
> > > There isn't really out there yet since only a very few viruses have
been
> > > created for Linux.  Worms are more common and attack you thru insecure
> > > programs listening to your internet connection.  Can you give us more
> > > data on what makes you think you are infected?
> > > Dow
> > >
> > >
> > > Nick Travis wrote:
> > >
> > > > Is there any free, or very cheap virus scan software out there for
> > > > linux, Red Hat specifically.  I think I have a virus but I can't
seem
> > > > to get rid of it.  Thanks
> > > > *__________________________________________________________________*
> > > > *Nick T*
> > > > *ICQ#: 104044906*
> > > > *Current ICQ status:*
> > > >
> > > > *+*  *More ways to contact me * <http://wwp.icq.com/104044906>
> > > > *__________________________________________________________________*
> > >
> > >
> > > --
> > > __________________________________________________________
> > > Dow Hurst                  Office: 770-499-3428
> > > Systems Support Specialist    Fax: 770-423-6744
> > > 1000 Chastain Rd., Bldg. 12
> > > Chemistry Department SC428  Email:dhurst at kennesaw.edu
> > > Kennesaw State University         Dow.Hurst at mindspring.com
> > > Kennesaw, GA 30144
> > > *********************************
> > > *Computational Chemistry is fun!*
> > > *********************************
> > >
> > >
> >
> >
> > _______________________________________________
> > Ale mailing list
> > Ale at ale.org
> > http://www.ale.org/mailman/listinfo/ale
> >
>
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
>


_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale