Suspicious ppa neurobin - potential virus generator
I'm not totally sure, and I don't have a safe environment to check it, but..
I wanted to download shc from the ppa:neurobin/ppa, the file is https:/
The tool should compile a shell script to an executable ELF file (native binary).
I used the following input file:
a.sh:
#!/bin/sh
echo abc
and called
shc -f a.sh -o a
then started
./a:
./BeurerSca
Please contact your provider <email address hidden>
I guess, something didn't work. But the text was highly alarming for me, and so I checked the intermediate c file, and it looks very weird, with lots of encoded data, and with the following main code which is far away of what I wrote.
--
last lines:
argv[1] = xsh(argc, argv);
);
return 1;
--
I checked the file on virustotal, the result is that 4 engines show it as suspicious.
https:/
https:/
I don't know what happened here with the ppa, but this software IS NOT SAFE
Question information
- Language:
- English Edit question
- Status:
- Answered
- Assignee:
- No assignee Edit question
- Last query:
- Last reply:
Can you help with this problem?
Provide an answer of your own, or ask Daniel for more information if necessary.