linux/rst.b Virus on Redhat linux

[Edwin Ruiz_2]

Hi!

I am having problems with the virus rst.b on my redhat linux... i try installing ravantivirus but is infected too i can scan with it. Do u know something about this virus? can i remove or i need to reinstall my server?

Pls help me

[Olivier Drouin · Accepted solution]

hmmm...what did you start another thread ?

Personnaly I would reinstall everything from scratch. You dont know what else has been installed without your knowledge.

You will then be able to secure your server *before* connecting it to the wild.

Close services, use iptables, use good passwd, tripwire...

See http://www.oreilly.com/catalog/linuxsckbk/

Normally you dont need linux AV. Well, I never used one and I dont have security problems...

[Alexander Chuzhoy]

Virus type: Elf Executable

Destructive: Yes

Aliases: RST.b, RST.A, Linux.RST.B, Linux/Rst.b, Linux/Rst-B, ELF/Rst.B, ELF.RST.B

Pattern file needed: 200

Scan engine needed: 5.200

Overall risk rating: Low


--------------------------------------------------------------------------------

Description:



This backdoor malware runs on Linux/UNIX platforms and infects ELF files in the current and /bin directories. This Linux backdoor and virus compromises system security by allowing remote users to manipulate and access infected machines.

Solution:


Trend customers

Keep your pattern file and scan engine updated. Trend Micro antivirus software can clean or remove most types of viruses. Certain viruses, such as Trojans, scripts, overwriting viruses and joke programs which are identified as "uncleanable", should simply be deleted.

All Internet users
For a quick check-up of your PC, use HouseCall - Trend Micro's free online virus scanner. This will check for viruses which may already be on your PC.

[Edwin Ruiz_2]

Thanks.. How can i get a trial .. i could not download a trial version...fron trend

[Alexander Chuzhoy]

try here:

http://www.trendmicro.com/en/products/file-server/sp-linux/evaluate/trial.htm