From: Felipe Bergo <bergo@se...> - 2003-06-02 15:30:15
I've already sent him an email saying that it could hardly be eboard's
fault (unless the debian package was infected, but then I believe I would
have gotten a lot of complaints by now), but seems really odd. (people
running anti-virus in linux ? a directory full of fonts infected ? The
mentioned virus even exists, according to google. And "machine hangs on
boot" is more likely to be due to some stupid anti-virus software deleting
files at will than virus damage itself).
---------- Forwarded message ----------
Date: Mon, 02 Jun 2003 09:19:19 -0400
From: William T. Johnston <wjohnst8@...>
Subject: UNIX/RST.B virus
Good morning Felipe,
I've used eboard for some months and was quite happy.
I was on FICS yesterday morning and asked a stupid question on
channels 83 and 86. I had connected using eboard from
eboard_0.4.3-1i386.deb. At that time I and eboard were apparently hit with
what F-Prot calls a Unix/RST.B virus and I lost the machine. The virus
seems to have infected at least the directory
/usr/X11R6/lib/X11/fonts/misc. F-Prot automatically deleted 2 of the files
and found an additional 22 instances of infection in this directory which
could not be removed. The infected drive hangs in boot and the last line
in /var/log/dmesg is ISO 9660 Extensions: RRIP_1991A.
Has eboard been infected with this virus before? Any suggestions
as to how to proceed? I'm running Linux 2.2.20 on the machine.