-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sat, Jul 14, 2018 at 04:52:50PM +0200, Hubert Hauser wrote: > Hello! > > I have recently received a following mail from root > <clamav-da...@autisticstory.net>: > > Please see the log file attached. > > clamav-2018-07-14.log > > /usr/bin/messages.mailutils: Unix.Trojan.Vali-6606621-0 FOUND > /usr/bin/systemd-mount: Unix.Trojan.Vali-6606621-0 FOUND
Hm. Throwing that into a search engine of my trust (no, not Google) turns up lots of strange-looking websites. If you have installed all your packages from a trusted source (what's in your /etc/apt/sources.list?), you might want to double-check with debsums whether those files mentioned by clamav have changed from the original. With dpkg -S you can find out which package those files came with. Cheers - -- tomás -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAltKGZsACgkQBcgs9XrR2kaSXACeMJ+hotD/FiTi+NjLdh3hg0St 1qkAmwUKucMNNi+QIlpb8R5KdWZ413OF =yN+h -----END PGP SIGNATURE-----