Warning: Virus Found In Jdk 1.6.0_05

[The Unknown]

This is to inform all of you that if you have installed

jdk-1.6.0_05-ea

RPM package for JAVA RUNTIME ENVIRONMENT OR JAVA DEVELOPMENT KIT ; a file in this package contains a virus. The file is

/opt/sun/javadb/demo/databases/toursdb.jar: Oversized.Zip FOUND

I scanned my system using

clamav-0.91.2-31.fc7

(it is the latest) with db updated on 28/11/2007.

I recommend you to scan your system using ClamAV .

[kalpik]

1. You should NEVER use the RPM file to install java! Use the bin file
2. As the description says, its NOT a virus, just a BIG zip file

[praka123]

^LOL!oversized zip files gives such messages as an ex clamav user i know that

[The Unknown]

Originally Posted by kalpik

1. You should NEVER use the RPM file to install java! Use the bin file
2. As the description says, its NOT a virus, just a BIG zip file

I used the bin file only.

[java_name].rpm.bin

[kalpik]

The bin wont have any rpm in it

[cool_techie_tvm]

Slightly offtopic, is it necessary to install an AV in a linux environment? I am using Firestarter. I read in ubuntu forums that it is unnecessary to install AV in ubuntu.

[praka123]

Yes.total waste of ur processor power.read below article:
Note to new Linux users: No antivirus needed
http://www.linux.com/articles/60208

[cool_techie_tvm]

Hmm, thanks for the info prakash !!

[rocket357]

AV has uses on UNIX....namely if you're using a *nix system as an HAVP proxy to protect Windoze systems, or you're using the *nix system as a mail transfer agent, or you're using it as an SMB share that Windows boxen will upload/download files from, etc... But protecting the UNIX box itself? haha...yeah AV is pretty useless there.

[mehulved]

Originally Posted by cool_techie_tvm

Slightly offtopic, is it necessary to install an AV in a linux environment? I am using Firestarter. I read in ubuntu forums that it is unnecessary to install AV in ubuntu.

You don't need one unless you are The Unknown.
We've explained him so much as to why it's stupid to run AV on his machines and all those stupid false positives but well some people don't learn.

[praka123]

^LOL!stupid windoz habits!

[vish786]

Originally Posted by The Unknown

I used the bin file only.

[java_name].rpm.bin

bin file is without rpm

Originally Posted by praka123

^LOL!stupid windoz habits!

[QwertyManiac]

Originally Posted by cool_techie_tvm

Slightly offtopic, is it necessary to install an AV in a linux environment? I am using Firestarter. I read in ubuntu forums that it is unnecessary to install AV in ubuntu.

Er, Firestarter is a Firewall program, NOT an anti-virus.

[praka123]

yes.it is good to have FW enabled.By default Ubuntu,Debian etc blocks ports.
and dont go for this firestarter gui.go for "lokkit" script.apt-get install lokkit and then in a terminal while ur system is connected to internet,run "lokkit" and just press OK.also make sure the option "High" is selected it protects!and for torrent clients who wants random port to be opened for tcp/udp connxn,run lokkit and select custom option and enter the port number for eg:51486 to open it.u can edit the rules in /etc/default/lokkit.
lokkit is enabled in default RH,Fedora distros.a easy one u dont need firestarter gui all to do this.

[cool_techie_tvm]

Originally Posted by QwertyManiac

Er, Firestarter is a Firewall program, NOT an anti-virus.

Ha ha. I know yaar, that firestarter is a firewall. According to ubuntu forums, we need to run only the firewall, no separate AVs. Thats what i was speaking of..

Originally Posted by praka123

yes.it is good to have FW enabled.By default Ubuntu,Debian etc blocks ports.
and dont go for this firestarter gui.go for "lokkit" script.apt-get install lokkit and then in a terminal while ur system is connected to internet,run "lokkit" and just press OK.also make sure the option "High" is selected it protects!and for torrent clients who wants random port to be opened for tcp/udp connxn,run lokkit and select custom option and enter the port number for eg:51486 to open it.u can edit the rules in /etc/default/lokkit.
lokkit is enabled in default RH,Fedora distros.a easy one u dont need firestarter gui all to do this.

I am using firestarter as mentioned in http://ubuntuforums.org/showthread.p...ht=firestarter

Would that suffice?

[praka123]

Ofcorz firestarter is more than enough.but lokkit makes u leave the thoughts about FW once it is configured while firestarter is there always eating ur resources as it is a gui program.nevertheless it suffice the needs for many users.it is all ur wish which one to use from easy lokkit to shorewall FW config utility.and u may be knowing these all are scripts for controlling netfilter iptables,the FW in GNU/Linux.
Yes,cooltechietvm,u dont need any AV for Linux.u may have already read:
Note to new Linux users: No antivirus needed.
http://www.linux.com/articles/60208
also never login as root.use terminal and "su" for root access.if u want to start any gui apps from terminal use a X credentials wrapper called "sux".thus instead of "su" use "sux" and start any app.this is esp useful in konsole which prevents gui programs launched from it

[Faun]

Hey i use firestarter to enable ICS in gutsy.

Is there any good tutorial to do it manually at the system startup using IPTABLES.

I really dont want any other 3rd party software, I tried IP Masquerading but didnt get it working well with the client computer running win-xp.

[QwertyManiac]

Firestarter doesn't keep running praka123, its just a small tool to apply iptable policies and save them. Doesn't require to be running actively all the time.

[praka123]

^yeah,i hardly used it!but i remember tray applet which launches firestarter GUI when pressed!I know that these are all iptables config tools

[QwertyManiac]

It shows the tray icon, yeah. But its not necessary to run the program all the time! Am just defending it from that point of yours. Its a nice GUI frontend.

[praka123]

^firestarter gui does show some useful things like who(IP's) are trying to probe ur lin box i remember!

[cool_techie_tvm]

The link which i had posted (http://ubuntuforums.org/showthread.p...ht=firestarter) enables firestarter to be enabled automatically on bootup.

[praka123]

yeah,the link may be explaining to add firestarter command to gnome-session-properties>startup manager to start hence taking more time and panel freezes for few seconds in low memory machines

well,i saw the link,yeah he did it via editing!wise

[The Unknown]

Originally Posted by mehulved

You don't need one unless you are The Unknown.
We've explained him so much as to why it's stupid to run AV on his machines and all those stupid false positives but well some people don't learn.

I am running a server for two sites. So if the guy with the other site puts malicious file, then it is not going to affect me but the viewer and hence my IP will be captured.

I AM NOT A FOOL. I KNOW THAT LINUX DOES NOT REQUIRE AV. I MENTIONED YOU THE CASE WHY I INSTALLED IT.

[praka123]

cool down dude

[The Unknown]

Originally Posted by praka123

cool down dude

How could I ? If such things like fools, etc are said without knowing the reason behind it ? (mehul)

[QwertyManiac]

Leave the running an AV part. Consider this stupid thread. You still would be called the same. Sun infecting their archives, You recommending us to run Clam AV, all are -->

[rocket357]

Politics and name-calling aside, there are instances where running AV on UNIX is the preferred technique for protecting Windows machines. It's been stated quite a few times in this thread (and countless others), but I'll state it once more:

Originally Posted by everyone

Windows was designed to allow others to run code on your machine...Linux was NOT designed that way!

This is the root cause of the need for AV on Windows. Plain and simple. (If you've never messed with writing code to control a Windows box (mouse and keyboard), I recommend you try it...then try porting your program to Linux... see what I mean?). It's fairly easy to control many aspects of a Windows machine (keyboard and mouse are just visual ones...there are many others), but accomplishing the same on Linux is quite a bit tougher. Linux doesn't take well to auto-run code and the like, but that doesn't make it *secure*. Linux users still need to be aware of rootkits and trojans.

No, running AV to protect a *nix box isn't recommended...but if you're the paranoid type, check out chkrootkit and rkhunter (programs to hunt down rootkits on UNIX machines). You'll get a LOT more good out of those two than (insert your favorite UNIX AV).

[gary4gar]

Originally Posted by The Unknown

I am running a server for two sites. So if the guy with the other site puts malicious file, then it is not going to affect me but the viewer and hence my IP will be captured.

I AM NOT A FOOL. I KNOW THAT LINUX DOES NOT REQUIRE AV. I MENTIONED YOU THE CASE WHY I INSTALLED IT.

Pwned

[The Unknown]

OK OK I WAS WRONG ABOUT THE FILE NAME.

The filename is

jdk-6u5-ea-bin-b05-linux-i586-16_oct_2007-rpm.bin

I thought it was

jdk-6u5-ea-bin-b05-linux-i586-16_oct_2007.rpm.bin

Now what you have to say praka123 and kalpik ?