13
votes
Accepted
ClamAV detected Kaiji malware on Ubuntu instance
I submitted a false positive report to ClamAV at https://www.clamav.net/reports/fp
This was the description I submitted:
The attached "helper" file was retrieved by running:
docker cp "$...
3
votes
ClamAV detected Kaiji malware on Ubuntu instance
ClamAV for me this morning (June 7 2023) is reporting Unix.Malware.Kaiji-10003916 found in various cloudwatch-agent, ssm-agent, gitlab and docker files on Amazon Linux.
False alarms or I have a lot of ...
2
votes
Is there a tool like ClamAV to scan PHP and JS files?
Signature-based antivirus has been poor detecting malware in web sites including web shells that are typically planted on compromised sites. If you send one as a sample to VirusTotal it is likely that ...
2
votes
Accepted
ClamAV detected Win.Virus.Expiro-10004389-0 malware on Ubuntu instance in Conda package
Based on the updated question with engines from Virustotal I see some of antivirus engines detect is as malware. The best recommendation I can give is to hold all operations with these files for ...
2
votes
ClamAV detected Kaiji malware on Ubuntu instance
All the "me too" posts suggest this is a false positive, however it would still be worthwhile to verify your checksums.
dpkg keeps a record of the md5 hashes of all the files it has ...
1
vote
How to wipe and completely reinstall all firmware on MikroTik router?
"even when its configuration is completely reset, it sends out SYN packets to random IP addresses on the Internet" does not automatically indicate compromise, if a) those are SYN/ACK reply ...
1
vote
ClamAV detected Kaiji malware on Ubuntu instance
I'm also seeing this. I got some PHP webshell alerts from Sophos so was investigating and found this with clamav. Not sure it has anything to do with the alert from Sophos. Some of our instances used ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
malware × 338security × 70
anti-virus × 51
linux × 43
windows × 37
php × 20
networking × 19
apache-2.2 × 17
windows-server-2003 × 17
ubuntu × 16
centos × 13
email × 12
spam × 11
clamav × 11
web-server × 8
wordpress × 8
hacking × 8
rootkit × 8
domain-name-system × 7
debian × 7
malicious × 7
windows-server-2008 × 6
firewall × 6
windows-7 × 6
windows-xp × 6