我的linux系统感染病毒了，clamav查不出来，把被感染文件发上来，大家分析一下。

jyhln

我的linux系统感染病毒了，clamav查不出来，把被感染文件发上来，大家分析一下。
没发现对系统有大的破坏，看起来它感染所有的二进制可执行文件。

附件里的cp.raw是正常的文件，cp.virus是被感染的文件。

请高手帮忙看下，看他都做了什么，有没有办法清除？

[ 本帖最后由 jyhln 于 2006-6-13 10:10 编辑 ]

jyhln

顶一下

jyhln

Kaspersky File Scanner
You're clean!

Kaspersky Anti-Virus has not detected any viruses at this time in the file you submitted.

However, only a fully-functional antivirus solution with regularly updated virus definitions can ensure comprehensive protection against malware. If you do not have an antivirus solution installed, you may wish to consider purchasing one today.

Scanned file:   cp.virus

Statistics:Known viruses:        200091        Updated:        13-06-2006
File size (Kb):        58        Virus bodies:        0
Files:        1        Warnings:        0
Archives:        0        Suspicious:        0

jyhln

[root@ask ~]# /opt/kav/5.5/kav4unix/bin/kavscanner cp/
Kaspersky Anti-Virus On-Demand Scanner for Linux. Version 5.5.3/RELEASE build #100, compiled Jul 27 2005, 15:36:21
Copyright (C) Kaspersky Lab, 1997-2005.
Portions Copyright (C) Lan Crypto
There are 188109 records loaded, the latest update 13-06-2006
Config file: /etc/kav/5.5/kav4unix/kav4unix.conf
/root/cp/cp.tar Archive GZIP
/root/cp/cp.tar/cp Archive Tar
/root/cp/cp.tar/cp/cp_dir/cp.raw OK
/root/cp/cp.tar/cp/cp_dir/cp.virus OK
/root/cp/cp.tar/cp OK
/root/cp/cp.tar OK
/root/cp/cp_dir/cp.raw OK
/root/cp/cp_dir/cp.virus OK