Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Sun 26 Oct 2014, 03:59
All times are UTC - 4
 Forum index » Off-Topic Area » Security
virus check says it found a virus in a .pet
Post_new_topic   Reply_to_topic View_previous_topic :: View_next_topic
Page 1 of 1 Posts_count  
Author Message
tubby

Joined: 24 Jan 2009
Posts: 317

PostPosted: Wed 24 Feb 2010, 07:34    Post_subject:  virus check says it found a virus in a .pet  

I have run a virus check on this system and i received the following alert on a pet in my download folder. Crying or Very sad

[Found possible virus] <Heuristic-90 (not disinfectable)>

Do you think it is dangerous or a bad report from xfprot?.
Back to top
View user's profile Send_private_message 
cthisbear

Joined: 29 Jan 2006
Posts: 3437
Location: Sydney Australia

PostPosted: Wed 24 Feb 2010, 08:03    Post_subject:  

Probably F-Prot.

Chris.
Back to top
View user's profile Send_private_message 
Lobster
Official Crustacean


Joined: 04 May 2005
Posts: 15117
Location: Paradox Realm

PostPosted: Wed 24 Feb 2010, 09:18    Post_subject:  

assuming it is a false positive . . what is the file?
https://forum.f-prot.com/index.php?topic=1251.0

. . . report here
http://www.f-prot.com/virusinfo/submission_form.html

_________________
Puppy WIKI
Back to top
View user's profile Send_private_message Visit_website 
DMcCunney

Joined: 02 Feb 2009
Posts: 897

PostPosted: Wed 24 Feb 2010, 10:49    Post_subject: Re: virus or not  

tubby wrote:
I have run a virus check on this system and i received the following alert on a pet in my download folder. Crying or Very sad

[Found possible virus] <Heuristic-90 (not disinfectable)>

Do you think it is dangerous or a bad report from xfprot?.

Most likely, false positive.

Was this scan run from Puppy on a Puppy folder?

Viruses don't really exist for Linux. The extant ones all want to infect Windows, and can't run on/infect anything else. Folks running A/V in Puppy are usually concerned with protecting a Windows partition/machine, using Puppy as a secure platform from which to scan/disinfect/repair.

I don't use Puppy for that, hence don't install/run A/V in it.
______
Dennis
Back to top
View user's profile Send_private_message 
tubby

Joined: 24 Jan 2009
Posts: 317

PostPosted: Wed 24 Feb 2010, 12:11    Post_subject:  

Lobster the pet is to large for me to send as i only have a slow upload sorry, i tried to pm you but there appears to be a problem.
Back to top
View user's profile Send_private_message 
Dingo


Joined: 11 Dec 2007
Posts: 1422
Location: somewhere at the end of rainbow...

PostPosted: Wed 24 Feb 2010, 12:31    Post_subject:  

often, false positives are caused by upx compression, so, executables compressed with upx are (falsely) identified as virus
_________________
replace .co.cc with .info to get access to stuff I posted in forum
dropbox 2GB free
OpenOffice for Puppy Linux

Edited_time_total
Back to top
View user's profile Send_private_message Visit_website 
dejan555


Joined: 30 Nov 2008
Posts: 2691
Location: Montenegro

PostPosted: Wed 24 Feb 2010, 12:53    Post_subject:  

Give us link from where you downloaded pet or give us name of pet only, someone will check it.
_________________


Back to top
View user's profile Send_private_message Visit_website MSNM 
tubby

Joined: 24 Jan 2009
Posts: 317

PostPosted: Wed 24 Feb 2010, 13:07    Post_subject:  

As the report is most probably a false positive i thought about posting the name of the pet but decided against it as i did not want to cast any doubt on the work of the originator, one shadow and a lot of good work could be undone.
I was hoping a moderator would allow me to pm them with the info,tried Lobster but it did not get through for some reason.
Back to top
View user's profile Send_private_message 
Lobster
Official Crustacean


Joined: 04 May 2005
Posts: 15117
Location: Paradox Realm

PostPosted: Thu 25 Feb 2010, 04:26    Post_subject:  

Quote:
Hi Lobster, re the infection reported, it is in the Quirky Linux Kernel 2.6.31.5-tickless_smp-q1.pet that i downloaded from the Quirky repository.
As i only have a very slow upload 20meg would take an awful long time, Maybe you can do it for me or ask someone else to check it out.
As the file came direct from Barry`s site you can understand why i did post what the pet was on the forum.

regards


You got through OK Smile
If anyone would like to find that file and check it please do.

Barry is on holiday at the moment
By making public any concerns you may have they can be investigated by our special team
of detective blood hounds Smile
- anyone up for it?

I understand and appreciate your concern not to 'cast aspersions'
but no one believes there is anything other than a false positive
- which has already been documented.

If a mistake has been made, then we would rather know
Something can be done Smile

Puppy Linux
Open Source at its best

_________________
Puppy WIKI
Back to top
View user's profile Send_private_message Visit_website 
tubby

Joined: 24 Jan 2009
Posts: 317

PostPosted: Thu 25 Feb 2010, 16:10    Post_subject:  

Thanks for following it up Lobster, i am hoping it is a false positive.
Back to top
View user's profile Send_private_message 
Display_posts:   Sort by:   
Page 1 of 1 Posts_count  
Post_new_topic   Reply_to_topic View_previous_topic :: View_next_topic
 Forum index » Off-Topic Area » Security
Jump to:  

Rules_post_cannot
Rules_reply_cannot
Rules_edit_cannot
Rules_delete_cannot
Rules_vote_cannot
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0574s ][ Queries: 11 (0.0032s) ][ GZIP on ]