Hi Mike. You might like to send this to sophos for analysis:
https://www.sophos.com/en-us/support/knowledgebase/11490.aspx As index.html is the default page if nothing else is configured, has your httpd.conf file been modified to server this binary file instead of index.html? HTH, Keith Roberts On 4 Jan 2016, at 16:18, Michael D. Berger <[email protected]> wrote: > Warning: This message contains unverified links which may not be safe. You > should only click links if you are sure they are from a trusted source. > Examining with Lemmy (A Windows version of VI), it looks like a binary file. > Size is 181.4 KB. > I am considering my favorite virus remover: DBAN, but it would take several > days work to > recover from that. > > Mike. > -- > Michael D. Berger > [email protected] > http://www.rosemike.net/ > > >> -----Original Message----- >> From: Daniel Beardsmore [mailto:[email protected]] >> Sent: Monday, January 04, 2016 05:03 >> To: [email protected] >> Subject: RE: [users@httpd] Possible virus via httpd server >> >> Well, what do you see if you examine the file in a text editor? >> >>> -----Original Message----- >>> From: Michael D. Berger [mailto:[email protected]] >>> Sent: 04 January 2016 05:03 >>> To: Apache-Users >>> Subject: [users@httpd] Possible virus via httpd server >>> >>> Using my WinXP Firefox client to access my previously working httpd >>> 2.4 server on Fedora 23 gets a file named 1OfvyQ5L instead of my >>> index.html . Do you think I have a virus on my Linux box? I did >>> notice that my iptables is not as tight as it should be. >>> >>> -- >>> Michael D. Berger >>> [email protected] >>> http://www.rosemike.net/ >>> >>> >>> >>> >> --------------------------------------------------------------------- >>> To unsubscribe, e-mail: [email protected] >>> For additional commands, e-mail: [email protected] >>> >>> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [email protected] >> For additional commands, e-mail: [email protected] >> > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
