Malware Detection

[KGIII]

I install lots of software, but Build-essential does not ring any bells in my memory.

That's really only needed when you are building software from source.

One 'common' use would be the VirtualBox tools. If you get into virtualizing OSes, you may run into that.

 

[Condobloke]

That's really only needed when you are building software from source.

One 'common' use would be the VirtualBox tools. If you get into virtualizing OSes, you may run into that.

And none of that is on my radar either. I avoid VM stuff of all types, and building soiftware from source is definitely not gonna happen.

I uninstalled it.

Unsure whether to chase it or let it go

 

[KGIII]

Unsure whether to chase it or let it go

Any remnants will be harmless.

I avoid VM stuff of all types

I like VMs, at least when they're useful. They let me test. They let me try other OSes. In fact, they even let me check the validity of solutions that I propose (from time to time). So, they're useful for me.

They do take up some resources. So, yeah, I could understand not using them. They can also have a learning curve. For that, I see VirtualBox or VMware as the best options. They're fairly intuitive, have a handy GUI, and they make features easily available.

I doubt that most people need either of those things. They don't need virtualization, and they don't need to build software from source. Building software from source can be fun. I have a weird fascination with watching the process, as text scrolls by in the terminal.

 

[Mike-BTU]

I mostly used Virtualbox to run Windows in Linux. But we no longer have a need for Windows.

Windows XP Pro was actually faster in that VM than when running as the sole OS!

 

[craigevil]

https://github.com/VirusTotal/yara-x can be installed using rust/cargo

cargo install yara-x-cli

Then the executable is yr.

yr --help
YARA-X 1.19.0, the pattern matching swiss army knife.

Victor M. Alvarez <[email protected]>

Usage:
  yr [OPTIONS] <COMMAND>

Commands:
  scan        Scan a file or directory
  compile     Compile rules to binary form
  dump        Show the data produced by YARA modules for a file
  fmt         Format YARA source files
  fix         Utilities for fixing source code
  completion  Output shell completion code for the specified shell
  deps        Show rule dependencies
  help        Print this message or the help of the given subcommand(s)

Options:
  -C, --config <CONFIG_FILE>
          Config file for YARA-X
          
          Specifies a config file which controls the behavior of YARA-X. If config file is not
          specified, ${HOME}/.yara-x.toml is used. If it does not exist the default options are
          applied.
          
          See https://virustotal.github.io/yara-x/docs/cli/config-file/ for supported options.

  -h, --help
          Print help (see a summary with '-h')

  -V, --version
          Print version