thanks fedora

[Robert Holtzman]

On Thu, Sep 23, 2010 at 08:53:23PM +0530, Tanmoy Chatterjee wrote:
> On Thu, Sep 23, 2010 at 3:30 AM, Robert Holtzman <holtzm at cox.net> wrote:

            ........snip......

> First, thanks for your opinion. I follow the man pages to run the
> clamav - so after it reports about the infected files - I copy the
> file names in my /home then remove the infected files.
> After that I check the PD and don't find those files there and running
> clamav again gives zero infected files list. So, I presume the PS is
> virus free.
> >
> > Second, I doubt that the light on the pen drive remaining on is a virus.
> > What makes you think it is?
> Secondly, when I used my newly bought PD in windows - with the
> selection of 'safely remove' option the light on the PD gets off -
> implying the device is now ready to manually remove from the usb port.
> But after my PD gets infected with a trozan and other viruses( like
> "hinhem.scr) two things happened - one I can't open the "command
> prompt" in windows and the other is the PD light keeps glowing even
> after selecting the "safely remove" option. Most probably it also
> comes with a warning message too - that some process/operation is
> still running. This makes me think that the hidden process might be
> some kind of virus as there is no operation pending with the PD to my
> knowledge.

Does the output of "ps aux" indicate anything?

> After removing the infected files from the PD and using it in Ubuntu
> 9.04 and Fedora 13 - gives me two types of result - "unmount" in
> Ubuntu keeps the light on - "safely remove" in Fedora switch off the
> light (implying the device.....) and I once again experienced my PD as
> I had experienced it when it was new.

Does your PD have more than one partition? If so, I'm told (if I
understood it right), "unmount" will not unmount all partitions which
would account for the light staying on. "Safely Remove....." will. Also,
all the pen drives I have used only display a light when they are being
read or written to. Not constant.

Out of curiosity, what kind of files did clamav find infected? Mail
files? Personal data files? System files? Configuration files?

-- 
Bob Holtzman
Key ID: 8D549279
"If you think you're getting free lunch,
 check the price of the beer"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20100923/764bae31/attachment.sig>