dslreports logo
Search similar:


uniqs
491

Brosheif
@apexcovantage.com

Brosheif

Anon

APT Question

I'm new to Linux and was following some instructions on the web and ended up running 'apt-get' in the "Terminal" and it downloaded and installed a bunch of stuff. I did some research and think I may have an APT trojan installed (stuipid me, I know). Does anyone know how to identify and clean it?

Also, does malwarebytes have a Linux version?

Thanks.

~bro

dib22
join:2002-01-27
Kansas City, MO

dib22

Member

What command did you run?

To find what command you ran, in terminal use the cursor up key to back scroll through commands you have typed, or just type 'history' in terminal to dump your entire history.

What variation of linux are you running?
Velnias
join:2004-07-06
233322

Velnias to Brosheif

Member

to Brosheif
Boring... bill, ballmer is that you?

Let me guess, what will happen:
you have no idea what happened, later got no help (you know, its very difficult for newbie...) and formatted hard drive, installed Windows...

Pjr
Don't Panic
join:2005-12-11
UK

Pjr to Brosheif

Member

to Brosheif
As well as answering dib22 's questions could you also post a link to the instructions you followed?

Brosheif
@apexcovantage.com

Brosheif to dib22

Anon

to dib22
Linux is Ubuntu 12.04 Desktop 64-bits. I typed 'history -c' to get the commands but it didn't show anything. Up and Down Arrow don't show anything either.

Thanks.

~bro

Pjr
Don't Panic
join:2005-12-11
UK

Pjr

Member

said by Brosheif :

Linux is Ubuntu 12.04 Desktop 64-bits. I typed 'history -c' to get the commands but it didn't show anything. Up and Down Arrow don't show anything either.

The '-c' option clears the history list. Can you post a link to the instructions you followed and how closely did you follow them?

dib22
join:2002-01-27
Kansas City, MO

dib22 to Pjr

Member

to Pjr
Sure is convenient that the magically knew how to clear the history but not access it isn't it? I feel we are being trolled

APT trojan (chuckle).
redwolfe_98
Premium Member
join:2001-06-11

redwolfe_98

Premium Member

said by dib22:

APT trojan (chuckle).

APT-command for the APT trojan...

Pjr
Don't Panic
join:2005-12-11
UK

Pjr to dib22

Member

to dib22
Agreed; we were trolled.

When I read Velnias 's reply I thought there wasn't enough evidence to call the OP a troll so I asked my question and if he couldn't provide a link, which he hasn't, then we have proof.

One of the reasons I was unsure is that he was obviously claiming to use either Debian or a Debian derivative. Ubuntu and LinuxMint have PPAs and software from PPAs are installed using apt.
said by »help.launchpad.net/Packa ··· Software :

Step 2: Open a terminal and enter:
sudo add-apt-repository ppa:user/ppa-name

...

Your system will now fetch the PPA's key. This enables your Ubuntu system to verify that the packages in the PPA have not been interfered with since they were built.

Important: This is not an endorsement of any of the software in PPAs. You must make sure you trust the PPA owner before installing their software.

If the OP had followed instructions to add an malicious but signed PPA an "apt trojan" is a possibility.