× NETGEAR will be terminating ReadyCLOUD service by July 1st, 2023. For more details click here.
Orbi WiFi 7 RBE973
Reply

Win.Malware.Triusor-6824994-0 in certbot files

dsnpevl
Virtuoso

Win.Malware.Triusor-6824994-0 in certbot files

Recently got antivirus warnings (see below) on w64, w32, t64, t32 executables in the cerbot files installed as part of letsencrypt.

Could be false positives, but removed them just in case.

See also: https://community.letsencrypt.org/t/win-malware-triusor-in-t32-t64-w32-w64-executables/83913

 

Jan 23, 2019 04:50:03 PM
System: Antivirus scanner found a threat ( Win.Malware.Triusor-6824994-0) in the file /opt/eff.org/certbot/venv/lib/python2.7/site-packages/pip/_vendor/distlib/w64.exe. Please delete the infected file soon.
Jan 23, 2019 04:50:03 PM
System: Antivirus scanner found a threat ( Win.Malware.Triusor-6824994-0) in the file /opt/eff.org/certbot/venv/lib/python2.7/site-packages/pip/_vendor/distlib/w32.exe. Please delete the infected file soon.
Jan 23, 2019 04:50:02 PM
System: Antivirus scanner found a threat ( Win.Malware.Triusor-6824994-0) in the file /opt/eff.org/certbot/venv/lib/python2.7/site-packages/pip/_vendor/distlib/t64.exe. Please delete the infected file soon.
Jan 23, 2019 04:50:02 PM

System: Antivirus scanner found a threat ( Win.Malware.Triusor-6824994-0) in the file /opt/eff.org/certbot/venv/lib/python2.7/site-packages/pip/_vendor/distlib/t32.exe. Please delete the infected file soon.

Model: ReadyNAS-OS6|
Message 1 of 2
Retired_Member
Not applicable

Re: Win.Malware.Triusor-6824994-0 in certbot files

Hi @dsnpevl , thanks for sharing this.

Kind regards

Message 2 of 2
Top Contributors
Discussion stats
  • 1 reply
  • 981 views
  • 1 kudo
  • 2 in conversation
Announcements