ClamAV and Fedora

sorrowful · 05-01-2022, 01:19 PM

Hello, while scanning my system today clamav found a trojan malware apparently. Since it's a fresh new installation of Fedora Workstation 35 and I only installed software through the official repo, I suspect it to be a false-positive.

https://i.postimg.cc/h480hZ52/screenshot.jpg

Has anyone encountered similar issue?

suramya · 05-01-2022, 03:02 PM

You can verify the finding by uploading the file to https://www.virustotal.com/gui/home/upload for checking.

Note that this is not recommended for files containing confidential data as it is an external site.

sorrowful · 05-03-2022, 11:58 AM

Thank you. I ran another check with virustotal and clamav is the only one that detected trojan (everything else showed undetected)

darthaxul · 07-31-2022, 10:06 PM

hackread says the trojan connects back to a command-and-control server to get more instructions, so if you are uploading any corrupted files, theoretically it could do anything, even change your test results to give you a false sense of security :/