clamav detecting these correctly?

tarquel

Verified User
Joined
Nov 6, 2006
Messages
106
Location
Mid-Wales, UK
clamav - are these detections safe to delete?

Hi all

I found these during a clamav scan i did earlier:

/sbin/ttymon: Trojan.Linux.Rootkit.A FOUND
/etc/X11/applnk/config: Trojan.Tsunami.B FOUND
/usr/lib/libsh/shsb: Linux.LionCleaner FOUND


There was a few things such as backdoor shell scripts, which of course have been removed, but the above detections i'm concerned about....

How do i know if a) its safe to just delete them b) the server wont just die on me if i do that c) how to repair them or get the original files to replace them with?

Can anyone give me a hand with this one as its a little scarey to know what exactly to do with them.

The 2nd [i believe] is to do with the X environment and as i dont use X on SSH, it probably wont be a bad thing if that gets deleted, but i'd like clarification if anyone knows.

Thanks
Nath.
 
Last edited:
Back
Top