Re: [clamav-users] crypto currency miner

2018-01-02 Thread Eric Tykwinski
> -Original Message- > From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On > Behalf Of Matthew Molyett > Sent: Tuesday, January 02, 2018 4:46 PM > To: ClamAV users ML > Subject: Re: [clamav-users] crypto currency miner > > L, > > minerd i

Re: [clamav-users] crypto currency miner

2018-01-02 Thread Matthew Molyett
L, minerd is being detected as tool which has been encountered with malicious usage. This specific tool has been observed being dropped and set up within honey pots. As with other tools, it has legitimate usage, but makes sense to flag because it is a valid indicator of compromise when located une

Re: [clamav-users] crypto currency miner

2018-01-02 Thread Al Varnell
On Tue, Jan 02, 2018 at 09:40 AM, lejeczek wrote: > I'd like to ask if your minder, if you mine crypto conins that is, often pop > up in clamav? > > I have this one: https://github.com/sammy007/cpuminer-multi > > > and it gets flagged as: > > ./cpum

Re: [clamav-users] crypto currency miner

2018-01-02 Thread Micah Snyder (micasnyd)
I’m not a signature creator, but Reindl is on to something. Some websites have started mining crypto currency using javascript using your computer if you visit their site. It’s abusive, but not really malicious. I’m guessing, as Reindl implied, that this signature is designed to detect such b

Re: [clamav-users] crypto currency miner

2018-01-02 Thread Reindl Harald
Am 02.01.2018 um 18:40 schrieb lejeczek: new to the list I'm, hi everyone. I'd like to ask if your minder, if you mine crypto conins that is, often pop up in clamav? I have this one: https://github.com/sammy007/cpuminer-multi and it gets flagged as: ./cpuminer-multi/minerd: Unix.Tool.Mine

[clamav-users] crypto currency miner

2018-01-02 Thread lejeczek
new to the list I'm, hi everyone. I'd like to ask if your minder, if you mine crypto conins that is, often pop up in clamav? I have this one: https://github.com/sammy007/cpuminer-multi and it gets flagged as: ./cpuminer-multi/minerd: Unix.Tool.Minerd-6404314-0 FOUND Would someone know somet