Jump to content

Server has virus through Ark


Recommended Posts

Spoiler
  1. [27-Feb-2021 01:00:02] INFO --> start av scanner
  2. [27-Feb-2021 06:24:49] INFO --> av scanner finished successfully
  3. [27-Feb-2021 06:24:49] INFO --> av scanner report:
  4. ------------- AV SCAN --------------
  5. Start: 2021-02-27 01:00:02
  6.  
  7. ---------- SCAN LOCATIONS ----------
  8. /home/users
  9. /tmp
  10. /var/tmp
  11. /home
  12. /opt
  13. /usr
  14.  
  15. ------ UPDATE VIRUS DATABASE -------
  16. Start: 2021-02-27 01:00:02
  17. End: 2021-02-27 01:00:02
  18. Status: Success
  19.  
  20. ------------ INFECTIONS ------------
  21. /opt/steam/arkcluster1/ShooterGame/Binaries/Win64/msvcp140_2.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  22. /opt/steam/arkcluster1/ShooterGame/Binaries/Win64/msvcp140.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  23. /opt/steam/arkcluster1/ShooterGame/Binaries/Win64/concrt140.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  24. /opt/steam/arkcluster1/ShooterGame/Binaries/Win64/vccorlib140.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  25. /opt/steam/arkcluster1/ShooterGame/Binaries/Win64/msvcp140_1.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  26. /opt/steam/arkcluster1/ShooterGame/Binaries/Win64/vcruntime140.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  27. /opt/steam/ark-staging/ShooterGame/Binaries/Win64/msvcp140_2.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  28. /opt/steam/ark-staging/ShooterGame/Binaries/Win64/msvcp140.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  29. /opt/steam/ark-staging/ShooterGame/Binaries/Win64/concrt140.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  30. /opt/steam/ark-staging/ShooterGame/Binaries/Win64/vccorlib140.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  31. /opt/steam/ark-staging/ShooterGame/Binaries/Win64/msvcp140_1.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  32. /opt/steam/ark-staging/ShooterGame/Binaries/Win64/vcruntime140.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  33. /opt/steam/arkcluster2/ShooterGame/Binaries/Win64/msvcp140_2.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  34. /opt/steam/arkcluster2/ShooterGame/Binaries/Win64/msvcp140.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  35. /opt/steam/arkcluster2/ShooterGame/Binaries/Win64/concrt140.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  36. /opt/steam/arkcluster2/ShooterGame/Binaries/Win64/vccorlib140.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  37. /opt/steam/arkcluster2/ShooterGame/Binaries/Win64/msvcp140_1.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  38. /opt/steam/arkcluster2/ShooterGame/Binaries/Win64/vcruntime140.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  39. /opt/steam/arkcluster3/ShooterGame/Binaries/Win64/msvcp140_2.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  40. /opt/steam/arkcluster3/ShooterGame/Binaries/Win64/msvcp140.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  41. /opt/steam/arkcluster3/ShooterGame/Binaries/Win64/concrt140.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  42. /opt/steam/arkcluster3/ShooterGame/Binaries/Win64/vccorlib140.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  43. /opt/steam/arkcluster3/ShooterGame/Binaries/Win64/msvcp140_1.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  44. /opt/steam/arkcluster3/ShooterGame/Binaries/Win64/vcruntime140.dll: Win.Malware.Fileinfector-9835655-0 FOUND
  45.  
  46. ----------- SCAN SUMMARY -----------
  47. Known viruses: 8521265
  48. Engine version: 0.102.4
  49. Scanned directories: 52799
  50. Scanned files: 573309
  51. Infected files: 24
  52. Data scanned: 98342.93 MB
  53. Data read: 138624.06 MB (ratio 0.71:1)
  54. Time: 19486.637 sec (324 m 46 s)
  55.  
  56. --------------- END ----------------

On my server I installed KeyHelp and it installed an antivirus scanner, and now it found in the Ark folder, Please fix this as soon as possible, so that I do not have to do a reinstallation, because it may well be that he is on it again.

The other data are clusters, and of course they have the same, so it's only about the ones in RED font.

Link to post
Share on other sites
  • Volunteer Moderator
9 minutes ago, Samsonett said:
  Reveal hidden contents

On my server I installed KeyHelp and it installed an antivirus scanner, and now it found in the Ark folder, Please fix this as soon as possible, so that I do not have to do a reinstallation, because it may well be that he is on it again.

The other data are clusters, and of course they have the same, so it's only about the ones in RED font.

Don't worry about it. First, you are on Linux so they will never even be loaded. Second, they are not viruses, but potentially are. Basically, your anti-virus sees them as potential threats because they could well be proxy libraries used to impersonate and inject themselves into a process.

Link to post
Share on other sites
15 hours ago, invincibleqc said:

Don't worry about it. First, you are on Linux so they will never even be loaded. Second, they are not viruses, but potentially are. Basically, your anti-virus sees them as potential threats because they could well be proxy libraries used to impersonate and inject themselves into a process.

Thanks for the quick reply, I have now reported it to ClamAV so they can react and my avscanner will not start anymore

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...