Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: ClamAV: users

Re: Linux Virus on Vista VM

 

 

ClamAV users RSS feed   Index | Next | Previous | View Threaded


sydz at softhome

May 14, 2008, 5:13 PM

Post #1 of 4 (227 views)
Permalink
Re: Linux Virus on Vista VM

Hello,

This is the virus that is found by ClamXav on Vista VM. McAfee does not find
it. It is only found by ClamXav. When I search the web for the string
nothing turns up. So someone please tell me what is this virus? Where does
it come from? Can it do any harm to macintosh and why no other av software
appears to be finding it? ClamXav uses the database of Clamav.

564d488d-5af8-2b27-c071-26856caccd4f.vmem: Linux.Lionworm FOUND

Cheers

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


bperry.volatile at gmail

May 14, 2008, 5:20 PM

Post #2 of 4 (218 views)
Permalink
Re: Linux Virus on Vista VM [In reply to]

Upload it to virustotal or something, see what comes up.

On Wed, May 14, 2008 at 7:13 PM, <sydz[at]softhome.net> wrote:

> Hello,
>
> This is the virus that is found by ClamXav on Vista VM. McAfee does not
> find
> it. It is only found by ClamXav. When I search the web for the string
> nothing turns up. So someone please tell me what is this virus? Where does
> it come from? Can it do any harm to macintosh and why no other av software
> appears to be finding it? ClamXav uses the database of Clamav.
>
> 564d488d-5af8-2b27-c071-26856caccd4f.vmem: Linux.Lionworm FOUND
>
> Cheers
>
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://lurker.clamav.net/list/clamav-users.html
>
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


sarocet at gmail

May 15, 2008, 1:46 PM

Post #3 of 4 (209 views)
Permalink
Re: Linux Virus on Vista VM [In reply to]

sydz[at]softhome.net wrote:
> Hello,
>
> This is the virus that is found by ClamXav on Vista VM. McAfee does not find
> it. It is only found by ClamXav. When I search the web for the string
> nothing turns up. So someone please tell me what is this virus? Where does
> it come from? Can it do any harm to macintosh and why no other av software
> appears to be finding it? ClamXav uses the database of Clamav.
>
> 564d488d-5af8-2b27-c071-26856caccd4f.vmem: Linux.Lionworm FOUND
>
> Cheers
I also found it, on the pagefile of a windows box which had no
relationship with linux. It's too big
to send it anywhere (plus i don't know which data could be there). But i
saved the file and can provide
what it's matching if needed.
I guess it's a too generic signature (though i'm quite lazy to see which
signature it has).
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


bperry.volatile at gmail

May 15, 2008, 1:49 PM

Post #4 of 4 (208 views)
Permalink
Re: Linux Virus on Vista VM [In reply to]

The reason I said upload it is because I have a copy of it on my testing
box. It is detected by kaspersky and avira antivir.

On Thu, May 15, 2008 at 3:46 PM, Sarocet <sarocet[at]gmail.com> wrote:

> sydz[at]softhome.net wrote:
> > Hello,
> >
> > This is the virus that is found by ClamXav on Vista VM. McAfee does not
> find
> > it. It is only found by ClamXav. When I search the web for the string
> > nothing turns up. So someone please tell me what is this virus? Where
> does
> > it come from? Can it do any harm to macintosh and why no other av
> software
> > appears to be finding it? ClamXav uses the database of Clamav.
> >
> > 564d488d-5af8-2b27-c071-26856caccd4f.vmem: Linux.Lionworm FOUND
> >
> > Cheers
> I also found it, on the pagefile of a windows box which had no
> relationship with linux. It's too big
> to send it anywhere (plus i don't know which data could be there). But i
> saved the file and can provide
> what it's matching if needed.
> I guess it's a too generic signature (though i'm quite lazy to see which
> signature it has).
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://lurker.clamav.net/list/clamav-users.html
>
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

ClamAV users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact lists@gossamer-threads.com
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.