DIGIT-ARC read-only archive · snapshot: July 23, 2026

Multiple viruses

31 posts · originally from https://geek.digit.in/community/threads/multiple-viruses.101836/

Sridhar_Rao
Sridhar_Rao Original post #1
Nov 11, 2008 at 6:27 PM
I run my system on Ubuntu. I also installed Avast for Linux. As I plugged in a USB pen drive, Linux asked me if a program be allowed to execute; obviously I denied permission.

A thorough scan revealed 6 trojans in the drive. Had I used this drive on my laptop running on XP, it surely would have been infected (despite all measures). Now, you know why I run antivirus on linux. I use it as a "sandbag" before running on windows machine.

OK, the problem is that avast is not able to delete/move to chest/rename it. Permission to do is being denied. The infections persist. What should I do now?
hellknight
Nov 11, 2008 at 7:32 PM
Remove Windows :D.. LOL.. you can change the permissions of the drive where you have viruses.. or you can manually delete those file by becoming a Administrator..
Sridhar_Rao
Nov 11, 2008 at 7:34 PM
How do I do that? I think I am logged in as administrator but I am not sure. Please let me know how.
Rahim
Rahim #4
Nov 11, 2008 at 7:36 PM
Be sure to cd to the pen drive mount point
Tell me where the pen drive is mounted first!!
Open a terminal and cd to where the pen drive is mounted, maybe in /media folder. Enter sudo chmod -R 777 * and this will allow full access to modify/delete the folders/files in the pen drive.

Be sure to cd to the pen drive mount point
Sridhar_Rao
Nov 11, 2008 at 7:41 PM
Is there a * after sudo chmod -R 777
There are some files in the pen drive that would want to run on their own, hope they wont get permission to run! Excuse me for my extreme ignorance!

I read this somewhere:
chmod 777 gives everyone all rights, chmod 700 gives the owner all rights, no one else can do anything with the file and you can make every combination like that.
Is 777 OK or 700?

The pen drive is mounted in media.
Rahim
Rahim #6
Nov 11, 2008 at 7:52 PM
^Full path to the mount point? Suppose it is mounted as /media/usb. Change accordingly.

Yes 700 will suffice in this case. Yes there is an asterisk * which will change the permissions of all files/folder in /media/usb folder.
Sridhar_Rao
Nov 11, 2008 at 7:54 PM
OK, I will do that, but before that I have a question. Isn't there a way to make the avast to clean them instead of myself changing the attributes and deleting them?
hellknight
Nov 11, 2008 at 7:55 PM
you can check the Pen-Drive's mount point by command fdisk -l.. it will show you all the mounted devices..
Rahim
Rahim #9
Nov 11, 2008 at 7:56 PM
Then you have to run avast in the root mode(admin). Highly dangerous stuff when choosing root account.

@hellknight: fdisk -l will show only the partitions and not their mount points.

Use df -l to highlight the various mount points.
Sridhar_Rao
Nov 11, 2008 at 8:03 PM
At the terminal i typed cd /media and got into it. next, i typed cd /usbdiskpro, which is the folder name of the drive and i get no such file or directory. i can see it in file browser.
Rahim
Rahim #11
Nov 11, 2008 at 8:05 PM
Try unplugging and then re-plugging the usb pen drive.
Sridhar_Rao
Nov 11, 2008 at 8:08 PM
Not happening! Is there any other way getting to it. Like a single statement....cd/media/usbdiskpro ??

Sorry! I was being stupid...all I had to do was to type cd usbdiskpro without that "/"

I am now going for sudo chmod -R 700 *
Rahim
Rahim #13
Nov 11, 2008 at 8:10 PM
^Chal maaf kiya :))

One more thing, since the folder's owner is "root", and using 700 will only allow root user to change anything. So why not use 777 to allow everyone,including the normal users to modify them?
Another way is to change the owner to ,say, your name and then use 700, so that it allows you to change them.
i hope your eyes re not rolling backwards reading this :D

Quick and Dirty Guide to Linux File Permissions
Sridhar_Rao
Nov 11, 2008 at 8:18 PM
Hurrah! Thanks...

I got to delete all those nasty files, even the hidden ones. I ran the avast scan and confirmed that all trojans were deleted. Even the ones in the trash folder. How do I revoke that permission?

Sorry, being totally ignorant of linux and its working, I understand nothing. I faithfully follow what good people like you guys tell me.

I have another question...not related to this

I installed clamav in order to bolster security (not linux) using synaptic manager but am unable to see it. Please help
Rahim
Rahim #15
Nov 11, 2008 at 8:21 PM
Install clam-gtk; it is a front end gui that you can find under system tools.
See this --Howto Install Clam AntiVirus with GTK frontend GUI
How do I revoke that permission?
Revoke what?

Try going through the link on Linux Permission posted above.
Sridhar_Rao
Nov 11, 2008 at 8:27 PM
I did find files like clamav, clamav-base, clamav-freshclam, clamav-getfiles, and clamtk and installed them successfully. I don't see it anywhere not even in any menu.
I did as described in this site
*yourubuntulinux.blogspot.com/2007/08/how-to-install-clamav-and-its-gui.html

I mean undoing that permission.
Rahim
Rahim #17
Nov 11, 2008 at 8:32 PM
It must be in Accessories Menu as Virus Scanner. Use the Guide posted.
Enter clamtk in a terminal to see if it opens.

As for the permissions, you can change it anyway you like, say changing its owner or changinf its permissions....it depends on our needs.
Sridhar_Rao
Nov 11, 2008 at 8:34 PM
That is the problem, it is not in the specified location. Any idea?

Is there a default menu editor in ubuntu?
Rahim
Rahim #19
Nov 11, 2008 at 8:35 PM
^Open it from a terminal using clamtk
Sridhar_Rao
Nov 11, 2008 at 8:37 PM
Quite unexpected... I found it in applications>system tools>virus scanner.

I tried to update and it says. "you must be root to install updates". How do I be the root?
Rahim
Rahim #21
Nov 11, 2008 at 8:41 PM
Arey bhai open a terminal and enter sudo clamtk. You have to use sudo to update any program remember?

sudo clamtk
go to help and go to Update
Sridhar_Rao
Nov 11, 2008 at 8:43 PM
Ab tak malum nahin tha, apki meherbani se aaj malum ho gaya, shukriya!
Rahim
Rahim #23
Nov 11, 2008 at 8:44 PM
^Why dont you use irc.eu.freenode.net for such queries, fast, efficient and addictive :))
Sridhar_Rao
Nov 11, 2008 at 8:47 PM
What is irc? a chat? pata nahin.
This forum has served most of my purposes, fast & efficient too. thanks to guys like you.
Rahim
Rahim #25
Nov 11, 2008 at 9:03 PM
^Kis duniya mein rahte hai mere pyaare bhaiiii.
Use xchat for this.
Faun
Faun #26
Nov 11, 2008 at 10:29 PM
lol...long troubleshooting :p
thewisecrab
Nov 11, 2008 at 11:07 PM
What is irc? a chat? pata nahin.
This forum has served most of my purposes, fast & efficient too. thanks to guys like you.
Here you go:
After a long discussion, we at #Digit IRC have decided to spam the forum with some fun-bites directly from the channel :razz: These are some samples, if you want more just visit #Digit IRC channel.

Before we go into details, here are some helpful links:

<Edit>

A New Channel

Another unofficial ThinkDigit channel is up at irc.freenode.net. Come visit us and enjoy your stay. No inhibitions, no restrictions. And don't forget to greet TheMatrixHasYou, the official mascot of our channel. He/she/it may surprise you and thrown in some punches too. See you there!

/join #think-digit in your IRC client or browser. Or, just click here to join via Mibbit.

</Edit>

[Tutorial] How to connect to Digit IRC
Browser based client: *www.mibbit.com/

Code:
Server: irc.freenode.net
Channel: #Digit
So, what do we do at #Digit?

We hang out.. Believe me, it’s a cool place to hang out (better than forum IMHO). No wonder some of us hang out there till 6AM in the morning..

We solve your problems. . We are there so solve all your problems: from text book to technology, girlfriend to Gnome. 7/24/365 (366 this year)

We talk.. about anything. Yes, ANYTHING! You wanna curse someone on this forum? We are all ears.. :grin:

we are constantly inventing new words. So, u can increase ur vocabulary. And we are on they way to copyright those words..

Some active members are:
  • kalpik (oh boy you gotta see how people like kalpik behave on chat room :razz: )
  • mehulved
  • gary4gar
  • qwertymaniac/QwertyM
  • int86
  • Quiz_Master
  • hitboxx
  • d1g1t
  • G__
  • filled-void/King-Buntu/learning-ubuntu
  • doraeman (love from Soviet Russia)
  • ShowMeFunny/n3rd (the crazy fella, stay away from him… :razz: )
  • Voldomort/voldy
  • Garbage
  • The_devil_himself
  • Amitava/amitava82/SamSerious
  • Aditya/aditya.shevade
  • hullap
Find it on Chit Chat :wink:
Rahim
Rahim #28
Nov 12, 2008 at 2:21 PM
^It seems Sridhar is satisfied with ThinkDigit Forum :)
thewisecrab
Nov 12, 2008 at 2:31 PM
He better be...:D
Zangetsu
Zangetsu #30
Nov 12, 2008 at 2:44 PM
we are constantly inventing new words. So, u can increase ur vocabulary. And we are on they way to copyright those words..

Cud u pls xplain this statement...:confused:
thewisecrab
Nov 12, 2008 at 3:00 PM
I ctrl+C-ed from here:
*thinkdigit.com/forum/showthread.php?t=82475
Seriously, the IRC is a great place to hang out :D
any doubts you have will be should be asked in that thread :wink: