It's completely normal for programs to use shared memory segments.
That's why they're there! :) rkhunter reports them because they're
persistent like the filesystem but not really visible, unlike the
filesystem. You have to know to look for them.
rkhunter is a tool for you to use as part of your investigation. I'm
very skeptical of its value in general but you absolutely cannot just
use its output as proof of anything nefarious.
Thanks
** Changed in: remmina (Ubuntu)
Status: New => Incomplete
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to remmina in Ubuntu.
https://bugs.launchpad.net/bugs/2024582
Title:
Suspicious large shared memory When Connecting to a Windows System
Status in remmina package in Ubuntu:
Incomplete
Bug description:
Hi,
Hi When I am Connecting to a Windows Server 2019 instance with my
Ubuntu 22.04 LTS System gets infected with rootkit and the rkhunter
log is showing suspicious large shared memory segments, we have
reinstalled the system and removed the malware XOR DDOS and tried
again but again the ubuntu system is affected, we are login using RDP
to the Windows System. we have added Time based OTP to login and SSH.
Using Remmina 1.4.25
Using Desktop Environment KDE Plasma 5.24.7
Connecting to windows server 2019 Standard
Connecting Via RDP
FreeRDP Version 2.6.1
I am attaching the rkhunter log along with the mail.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/remmina/+bug/2024582/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
