[clamav-users] Silly question - clamav - linux viruses?

[gin(e)]

On 04/17/2014 04:46 PM, Dave Shevett wrote:
> Hi folks, sorry for the seemingly silly question, but I can't find it in
> he FAQ nor can I find it by S-ing TFW. 
> 
> Does clamav on linux scan for 'linux viruses'?  I know the definition of
> that is nebulous, and the number of documented linux virii is extremely
> low (for ones that would not be classified as root hacks or simple
> coding errors).
> 
> I need to present to management that we don't need to run clamav virus
> scans across /usr/bin, /lib, /usr/sbin, etc.  We should, however, have a
> root kit checker installed (right now we do use 'aide' to function as a
> tripwire mechanism).
> 
> But, can I say "clamav does not scan for linux viruses" or is that not true?

An old alert on my bsd server when a vhost was hacked:

xxxxxx.xx/htdocs/css/php5.php:
PHP.Shell-38 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 1435705
Engine version: 0.97.6-exp
Scanned directories: 33860
Scanned files: 219695
Infected files: 1
.. [cut] ..