-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Friday, 2010-10-22 at 12:45 +0200, Stan Goodman wrote:
I have received a message from my hosting service informing me that they have found that my FTP password has been compromised by an intruder or a trojan, and that they have cleaned it of malicious software and given it a temporary password. They urge me to perform a "full anti-viral scan on your local PC (using an in-depth scanner)".
That's probably just the copy-pasted stock advise.
Through YaST I have searched the usual repos plus Packman to find software to make such a scan, but there is little there, and all of it seems to be for mail gateways or proxies, which I think are not relative. I've also searched the Web. especially openSuSE pages, for helpful information, but so far have not recognized any.
I would appreciate advice on how to proceed and what tool(s) to use for this.
Install clamav, then activate system service "freshclam" to keep it updated. Then run "clamav /" and let it run. Clamav doesn't have a great hit ratio. You can also install "antivir", which is gratis for personal use, but not free, update it manually (antivir --update), then scan from root. Both work on a terminal. Forget GUIs. The real problem is the security setup on your hosting service. It is they who have a problem. FTP passwords are usually not encrypted, they can be sniffed. Or they were subject to a dictionary attack. Or somebody just guessed your password. Make sure you use a difficult password, symbols and letters and as long as you can use. Do not reuse passwords on two sites, always use different passwords. Malicious software can be used to set up a network of bots that try to break up (guess) the passwords of sites, too. - -- Cheers, Carlos E. R. (from 11.2 x86_64 "Emerald" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.12 (GNU/Linux) iEYEARECAAYFAkzBcx4ACgkQtTMYHG2NR9X+EACfelzsuuaFnojH6QjNNgLQNNSL XgsAnjOhZbhI1WLa0n946mKAdyQxqFcb =cvww -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org