4 ms·
I did not really understand it from the article but... how can one verify the existence of this on their own system and if needed, purge it ?
by Phurist 5y ago
I did not really understand it from the article but... how can one verify the existence of this on their own system and if needed, purge it ?
- fguerraz 5y agoThey give some md5, so you could check if any of your binaries gives any of these hashes
- danuker 5y agoToo bad MD5 is broken. To really confuse things, the attackers could generate an innocent but colliding binary.
- mvolfik 5y agoHow does it help them? If you find file with this MD5 on your system, you have either the virus, or a colliding binary crafted by the attackers - bad in either case \o/
- gvb 5y agols -l $HOME/.gvfsd/.profile/gvfsd-helper /bin/systemd/systemd-daemon /usr/lib/systemd/systemd-daemon If one or more of those files is found, you likely are infected - they probably are not "real" system files. If you find one, do a system audit https://linux-audit.com/determine-file-and-related-package/ https://linux-audit.com/determine-file-and-related-package/