I need your help. Today I found (using wireshark) many requests are being thrown from my system to some other system and vice-versa. When I did the reverse DNS then I found it is AMAZONAWS malware.
Can any one please give me solution on how to tackle it.
Need Help Thanks
Without knowing the ports and protocols being used, I would say it is probably one of the Ubuntu mirrors used for updating your system. Upon logging in for the first time in any given day, the system looks up how many packages need updating. This could be the source. The reverse DNS lookup, if using Amazon servers, will be different than the forward lookup.
What was the port and protocols being used?
Antivirus in Linux are very efficient since there aren't much viruses/malware around.
Run sudo apt-get install clamav in a console (xterm is fine) to install Clam Antivirus.
After that, run it and do a full system scan to be sure that no malware infected you system; run it as root using sudo only if it requires more privileges.
Remember that Linux isn't invulnerable and can be infected like any other modern OS if isn't always updated and well configured.
I think that your PC is healthy, but a check isn't bad, don't you agree?
Comment here if you still have problems.
