This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Linux savscan finds W95/CIH-10xx inside VirtualBox vdi file

Hi there,

I just installed Sophos Antivirus for Linux 9.10 and did a complete scan of my system.

The only virus found was as follows (extracted from the log):

Threat detected in /media/vms/VirtualBox VMs/WindowsXP/WindowsXP.vdi: W95/CIH-10xx during on-demand scan. (The file is still infected.)

I'm intrigued as to how savscan could find a virus in a .vdi file in the first place. Anyway, I booted up the VM and threw Sophos Virus Removal Tool, HitmanPro, Malwarebytes, SuperAntiSpyware and Panda Antivirus at it, all declaring the virtual computer clean.

Has anyone come across this before and/or is there any explanation for it?

Many thanks.

This thread was automatically locked due to age.