Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 0 down vote favorite

I've scanned my computer with clamAV which has found one file infected with Trojan.Agent-252697. I've of course immediately removed the file, but I have no idea how can I find out what does this trojan exactly do.

OS: Ubuntu 10.04

clamAV version: 0.97.6

share|improve this question
This question is too localized (dealing with one virus ID). Usually, googling will help a great deal. Googling your virus ID I found a link to a previously scanned similar virus indicating that it might be a fake antivirus application of some sort: virustotal.com/file/… – Henning Klevjer Nov 10 '12 at 21:12
This is more or less what I could find, but I wanted to find an information about what is this trojan. Or any other. I could check in google what can trojans do in general to the system, but I don't know what can do this particular one. Especially if it's a windows or linux trojan. The only pages I've found in google was similar to the one you've send me a link: a list of malevare with a date it was added to the database. Without any description. – user15924 Nov 10 '12 at 21:33
1)clamAV tends to throw up a lot of false positives, 2) I suggest pushing the file to virustotal.com and see what various scanners flag it as, different engines use their own databases with their own naming. – ewanm89 Nov 11 '12 at 0:01
@user15924 why do you need? – Grijesh Chauhan Dec 8 '12 at 16:28

closed as too localized by Rory Alsop♦ Nov 10 '12 at 22:16

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, see the FAQ.