[SOLVED] Possible Linux/Ebury

bscho · 09-23-2017, 11:18 PM

Ran chkrootkit and this came up Possible Linux/Ebury - Operation Windigo installetd

Checks and it says I am in infected.
ssh -G 2>&1 | grep -e illegal -e unknown > /dev/null && echo “System clean” || echo “System infected”
“System infected”

How I can remove it please?

galen · 08-02-2019, 02:24 PM

find /lib* -type f -name libns2.so
ssh -G 2>&1 | grep -e illegal -e unknown -e Gg > /dev/null && echo "System clean" || echo "System infected"

bscho · 08-02-2019, 04:29 PM

Quote:

Originally Posted by galen

find /lib* -type f -name libns2.so
ssh -G 2>&1 | grep -e illegal -e unknown -e Gg > /dev/null && echo "System clean" || echo "System infected"

Thanks for that now says clean after I had removed some suspect files even though I have installed 19.2