Hello clamav-users,
I wonder could someone advise whether I should be taking some action over these
scan results. These are the last 4 daily scans on a CentOS4 based server dated
16-19 Dec 06. I haven't intervened in the server between scans, but note that
the second scan doesn't have the virus identified in the first scan, and that
the Office97 install folder hasn't been touched for ages and seems an odd place
for a virus to insert itself.
Many thanks, David.
***************************
//home/e-smith/files/ibays/install/files/TheBat/163b11/Thebat.exe:
Trojan.Dropper.Agent-134 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 83198
Engine version: 0.88.6
Scanned directories: 18094
Scanned files: 163492
Infected files: 1
Data scanned: 64241.85 MB
Time: 30506.730 sec (508 m 26 s)
*************************************
----------- SCAN SUMMARY -----------
Known viruses: 83676
Engine version: 0.88.6
Scanned directories: 18088
Scanned files: 163543
Infected files: 0
Data scanned: 64255.84 MB
Time: 62817.847 sec (1046 m 57 s)
************************************
//home/e-smith/files/ibays/install/files/Office97/licence/Office/PPTTOOLS.PPA:
Exploit.MSWord.CVE_2006_6561 FOUND
//home/e-smith/files/ibays/install/files/Office97/OFFICE/GENIWIZ.PPA:
Exploit.MSWord.CVE_2006_6561 FOUND
//home/e-smith/files/ibays/install/files/Office97/OFFICE/PPTTOOLS.PPA:
Exploit.MSWord.CVE_2006_6561 FOUND
//home/e-smith/files/ibays/install/files/Office97/VALUPACK/MUSICTRK/PPMUS1.CAB:
Exploit.MSWord.CVE_2006_6561 FOUND
//home/e-smith/files/ibays/mail-client/files/Mail/Audio/clamAV/MESSAGES.TBB:
Eicar-Test-Signature FOUND
//home/e-smith/files/ibays/mail-client/files/Mail.Bat1.6/Audio/clamAV/MESSAGES.TBB:
Eicar-Test-Signature FOUND
----------- SCAN SUMMARY -----------
Known viruses: 84428
Engine version: 0.88.7
Scanned directories: 18079
Scanned files: 163529
Infected files: 6
Data scanned: 64162.17 MB
Time: 30364.645 sec (506 m 4 s)
**************************************
//home/e-smith/files/ibays/install/files/Office97/licence/Office/PPTTOOLS.PPA:
Exploit.MSWord.CVE_2006_6561 FOUND
//home/e-smith/files/ibays/install/files/Office97/OFFICE/GENIWIZ.PPA:
Exploit.MSWord.CVE_2006_6561 FOUND
//home/e-smith/files/ibays/install/files/Office97/OFFICE/PPTTOOLS.PPA:
Exploit.MSWord.CVE_2006_6561 FOUND
//home/e-smith/files/ibays/install/files/Office97/VALUPACK/MUSICTRK/PPMUS1.CAB:
Exploit.MSWord.CVE_2006_6561 FOUND
//home/e-smith/files/ibays/mail-client/files/Mail/Audio/clamAV/MESSAGES.TBB:
Eicar-Test-Signature FOUND
//home/e-smith/files/ibays/mail-client/files/Mail.Bat1.6/Audio/clamAV/MESSAGES.TBB:
Eicar-Test-Signature FOUND
----------- SCAN SUMMARY -----------
Known viruses: 84692
Engine version: 0.88.7
Scanned directories: 18094
Scanned files: 163604
Infected files: 6
Data scanned: 68397.59 MB
Time: 31552.672 sec (525 m 52 s)
***************************************
--
Best regards,
David
Tel: +44 (0)207 637 2288
Audley House
9 Margaret Street
London W1W 8RH
to find out more about
audio at Edit Video, visit
www.thornquest.com
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
