Score:1

Error when running chkrookit

vn flag

When I run chkrookit command in my Ubuntu WSL distribution, it returns the following:

Searching for Linux.Xor.DDoS ... INFECTED: Possible Malicious Linux.Xor.DDoS installed

Is that going to cause any problems for my machine? I have heard that often happens when you run chkrootkit.

ChanganAuto avatar
us flag
https://security.stackexchange.com/questions/237369/possible-malicious-linux-xor-ddos-installed and https://unix.stackexchange.com/questions/626879/chkrootkit-reports-possible-malicious-linux-xor-ddos-installed-how-do-i-verify
N0rbert avatar
zw flag
I'll suggest to upload problematic file to https://www.virustotal.com to have some better statistics. Or scan whole system by Linux-based live antivirus like [Avira](https://download.avira.com/download/rescue-system/avira-rescue-system.iso) or [Sophos](https://support.sophos.com/support/s/article/KB-000033800?language=en_US).
David avatar
cn flag
What version of Ubuntu? Desktop or Server or Core?
Score:1
vn flag

It seems chrootkit can return a false positive when you have an executable file in your /tmp folder.

So start to check if this is the case - if yes make sure this is no longer the case, and run the check again.

Reference here.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.