volc

2025-04-10

Hello.

I've found one of my servers has a rootkit file in /usr/bin/

I ran chkrootkit and I found that the file "volc" resides on /usr/bin/

Now, I know there is a Volc rootkit, but slocate shows no signs of the rootkit's presense ( slocate is clean btw )

Is it safe to delete /usr/bin/volc ?

Thanks!