My host sent a notification that says server is infected with a malware, it doesn't seem very popular. The Symantec site about this malware shows windows machines as targets, but not CentOS.
- Anyone knows what this malware does exactly ?
- What are the chances that this is a false alarm?
- Can I install any easy-to-use tool that can safely scan my system from SSH without breaking any system files ?
In the last 24 hours, Symantec analysts have identified malware configured to communicate with resources on your network. The malware and your related resources are listed below.
MD5 Detection ASN Description b83ff89585d668c3ca96b34b44da4093 Backdoor.Graybird!Gen 16265 www.dymll.com, 82.192.XXX.XXX, 82.192.XXX.0/19, ripencc, NL, FIBERRING LeaseWeb B.V.,NL
Please use this information to investigate the potential abuse of your network, and take corrective actions based on your own internal procedures.