how to so I can remove it :: /home/michael/ .config/opera/Default/adblocker_rules.json: Sanesecurity.Phishing.Fake.Coin.32024.UNOFFICIAL FOUND

Asked by michael

On Ubuntu 20.04 Pro, ClamAV found this [ /home/michael/ .config/opera/Default/adblocker_rules.json: Sanesecurity.Phishing.Fake.Coin.32024.UNOFFICIAL FOUND ] I have not been able to find this file to remove it. Because I don't use Opera often, I removed it completely. Still ClamAV finds it.

Thank You

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu linux Edit question
Assignee:
No assignee Edit question
Solved by:
Manfred Hampl
Solved:
Last query:
Last reply:
Revision history for this message
Manfred Hampl (m-hampl) said :
#1

Open a terminal window (e.g. by simultaneously pressing ctrl-alt-t) and issue the command

ls -la ~/.config/opera/Default/ad*

What output do you receive?

Revision history for this message
michael (yellupcm-gmail) said :
#2

-rw------- 1 michael michael 4428047 Aug 24 2023 /home/michael/.config/opera/Default/adblocker_rules.json

/home/michael/.config/opera/Default/adblocker_data:
total 19052
drwx------ 2 michael michael 4096 Aug 24 2023 .
drwx------ 49 michael michael 12288 Jun 15 14:11 ..
-rw------- 1 michael michael 19160281 Aug 24 2023 2f508cccdcce328d19d56a5ffc101dac.easylist
-rw------- 1 michael michael 70089 Aug 24 2023 a10a00843048b4b81b0ed91e20397cf7.easylist
-rw------- 1 michael michael 256181 Aug 24 2023 e6d5693277c7493e313162f00762b70e.easylist

Revision history for this message
Daniel Letzeisen (dtl131) said :
#3

I'm guessing it's a false positive. You can have ClamAV devs investigate it: https://www.clamav.net/reports/fp

Revision history for this message
Best Manfred Hampl (m-hampl) said :
#4

The file is there

-rw------- 1 michael michael 4428047 Aug 24 2023 /home/michael/.config/opera/Default/adblocker_rules.json

If you have already removed opera, then you will not need that file any more. You can delete it and all other private data belonging to opera with the command

rm -rfv /home/michael/.config/opera

Revision history for this message
michael (yellupcm-gmail) said :
#5

Thanks Manfred Hampl, that solved my question.

Revision history for this message
michael (yellupcm-gmail) said :
#6

Daniel Letzeisen

I checked the site you gave, they said it was not a false positive. I was thinking it was.