Ubuntu
apt package

Are Ubuntu repositories virus free?

Asked by KAMI

Hi,

For a project I am mirroring Ubuntu. I run a virus check with clamav and got this:
/storage/synaptel-repository/apt-archive/2011-10-05/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/s/sanitizer/sanitizer_1.76.orig.tar.gz: Exploit.WMF.Gen-1 FOUND
/storage/synaptel-repository/apt-archive/2011-10-05/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/s/sqlmap/sqlmap_0.6.4.orig.tar.gz: PHP.Shell-32 FOUND
/storage/synaptel-repository/apt-archive/2011-10-05/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/m/mailscanner/mailscanner_4.74.16.orig.tar.gz: Eicar-Test-Signature-1 FOUND
/storage/synaptel-repository/apt-archive/2011-10-05/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/p/pymilter-milters/pymilter-milters_0.8.13.orig.tar.gz: Suspect.DoubleExtension-zippwd-12 FOUND
/storage/synaptel-repository/apt-archive/2011-10-05/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/p/pymilter/pymilter_0.9.3.orig.tar.gz: Exploit.IFrame.Gen FOUND
/storage/synaptel-repository/apt-archive/2011-10-05/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/n/nepenthes/nepenthes_0.2.2.orig.tar.gz: Trojan.Downloader.Bat FOUND
/storage/synaptel-repository/apt-archive/2011-10-05/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/n/nautilus-clamscan/nautilus-clamscan_0.2.2.orig.tar.gz: ClamAV-Test-File FOUND
/storage/synaptel-repository/apt-archive/2011-09-19/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/s/sanitizer/sanitizer_1.76.orig.tar.gz: Exploit.WMF.Gen-1 FOUND
/storage/synaptel-repository/apt-archive/2011-09-19/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/s/sqlmap/sqlmap_0.6.4.orig.tar.gz: PHP.Shell-32 FOUND
/storage/synaptel-repository/apt-archive/2011-09-19/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/m/mailscanner/mailscanner_4.74.16.orig.tar.gz: Eicar-Test-Signature-1 FOUND
/storage/synaptel-repository/apt-archive/2011-09-19/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/p/pymilter-milters/pymilter-milters_0.8.13.orig.tar.gz: Suspect.DoubleExtension-zippwd-12 FOUND
/storage/synaptel-repository/apt-archive/2011-09-19/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/p/pymilter/pymilter_0.9.3.orig.tar.gz: Exploit.IFrame.Gen FOUND
/storage/synaptel-repository/apt-archive/2011-09-19/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/n/nepenthes/nepenthes_0.2.2.orig.tar.gz: Trojan.Downloader.Bat FOUND
/storage/synaptel-repository/apt-archive/2011-09-19/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/n/nautilus-clamscan/nautilus-clamscan_0.2.2.orig.tar.gz: ClamAV-Test-File FOUND
/storage/synaptel-repository/apt-archive/2011-09-13/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/s/sanitizer/sanitizer_1.76.orig.tar.gz: Exploit.WMF.Gen-1 FOUND
/storage/synaptel-repository/apt-archive/2011-09-13/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/s/sqlmap/sqlmap_0.6.4.orig.tar.gz: PHP.Shell-32 FOUND
/storage/synaptel-repository/apt-archive/2011-09-13/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/m/mailscanner/mailscanner_4.74.16.orig.tar.gz: Eicar-Test-Signature-1 FOUND
/storage/synaptel-repository/apt-archive/2011-09-13/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/p/pymilter-milters/pymilter-milters_0.8.13.orig.tar.gz: Suspect.DoubleExtension-zippwd-12 FOUND
/storage/synaptel-repository/apt-archive/2011-09-13/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/p/pymilter/pymilter_0.9.3.orig.tar.gz: Exploit.IFrame.Gen FOUND
/storage/synaptel-repository/apt-archive/2011-09-13/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/n/nepenthes/nepenthes_0.2.2.orig.tar.gz: Trojan.Downloader.Bat FOUND
/storage/synaptel-repository/apt-archive/2011-09-13/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/n/nautilus-clamscan/nautilus-clamscan_0.2.2.orig.tar.gz: ClamAV-Test-File FOUND
/storage/synaptel-repository/apt-archive/2011-09-06/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/s/sanitizer/sanitizer_1.76.orig.tar.gz: Exploit.WMF.Gen-1 FOUND
/storage/synaptel-repository/apt-archive/2011-09-06/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/s/sqlmap/sqlmap_0.6.4.orig.tar.gz: PHP.Shell-32 FOUND
/storage/synaptel-repository/apt-archive/2011-09-06/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/m/mailscanner/mailscanner_4.74.16.orig.tar.gz: Eicar-Test-Signature-1 FOUND
/storage/synaptel-repository/apt-archive/2011-09-06/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/p/pymilter-milters/pymilter-milters_0.8.13.orig.tar.gz: Suspect.DoubleExtension-zippwd-12 FOUND
/storage/synaptel-repository/apt-archive/2011-09-06/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/p/pymilter/pymilter_0.9.3.orig.tar.gz: Exploit.IFrame.Gen FOUND
/storage/synaptel-repository/apt-archive/2011-09-06/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/n/nepenthes/nepenthes_0.2.2.orig.tar.gz: Trojan.Downloader.Bat FOUND
/storage/synaptel-repository/apt-archive/2011-09-06/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/n/nautilus-clamscan/nautilus-clamscan_0.2.2.orig.tar.gz: ClamAV-Test-File FOUND
/storage/synaptel-repository/apt-archive/2012-02-08/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/s/sanitizer/sanitizer_1.76.orig.tar.gz: Exploit.WMF.Gen-1 FOUND
/storage/synaptel-repository/apt-archive/2012-02-08/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/s/sqlmap/sqlmap_0.6.4.orig.tar.gz: PHP.Shell-32 FOUND
/storage/synaptel-repository/apt-archive/2012-02-08/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/m/mailscanner/mailscanner_4.74.16.orig.tar.gz: Eicar-Test-Signature-1 FOUND
/storage/synaptel-repository/apt-archive/2012-02-08/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/p/pymilter-milters/pymilter-milters_0.8.13.orig.tar.gz: Suspect.DoubleExtension-zippwd-12 FOUND
/storage/synaptel-repository/apt-archive/2012-02-08/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/p/pymilter/pymilter_0.9.3.orig.tar.gz: Exploit.IFrame.Gen FOUND
/storage/synaptel-repository/apt-archive/2012-02-08/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/n/nepenthes/nepenthes_0.2.2.orig.tar.gz: Trojan.Downloader.Bat FOUND
/storage/synaptel-repository/apt-archive/2012-02-08/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/n/nautilus-clamscan/nautilus-clamscan_0.2.2.orig.tar.gz: ClamAV-Test-File FOUND
/storage/synaptel-repository/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/s/sanitizer/sanitizer_1.76.orig.tar.gz: Exploit.WMF.Gen-1 FOUND
/storage/synaptel-repository/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/s/sqlmap/sqlmap_0.6.4.orig.tar.gz: PHP.Shell-32 FOUND
/storage/synaptel-repository/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/m/mailscanner/mailscanner_4.74.16.orig.tar.gz: Eicar-Test-Signature-1 FOUND
/storage/synaptel-repository/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/p/pymilter-milters/pymilter-milters_0.8.13.orig.tar.gz: Suspect.DoubleExtension-zippwd-12 FOUND
/storage/synaptel-repository/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/p/pymilter/pymilter_0.9.3.orig.tar.gz: Exploit.IFrame.Gen FOUND
/storage/synaptel-repository/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/n/nepenthes/nepenthes_0.2.2.orig.tar.gz: Trojan.Downloader.Bat FOUND
/storage/synaptel-repository/apt-mirror/mirror/archive.ubuntu.com/ubuntu/pool/universe/n/nautilus-clamscan/nautilus-clamscan_0.2.2.orig.tar.gz: ClamAV-Test-File FOUND

I know the test signatures are OK, but what about outhers? I apt-mirrored Ubuntu 10.04.

Best regards,
KAMI

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu apt Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
actionparsnip (andrew-woodhead666) said : 		#1

I suggest you report a bug. The official repos are clean. If you start adding PPAs then these you cannot be fully certain of.

Can you help with this problem?

Provide an answer of your own, or ask KAMI for more information if necessary.

To post a message you must log in.