Malware removal

[DrSavignano]

Today I found the XXmaCchN eating up my CPU 1. ChatGPT identified it as malware. Once I removed it my Server calmed down. Did this get removed in the latest release?

[C4illin]

I dont think this has anything to do with ConvertX, do you have any more details? Did you expose the instance in any unsafe way?

[C4illin]

There is no version of ConvertX with included malware, where did you read this comment?

[DrSavignano]

The comment was from my Google Discovery however, I just removed the malware this morning. Here were the steps I took to remove it: 🚨 Step 1: Stop and Remove the ConvertX Container
Run the following commands:
Step 2: Remove the Infected Image
docker rmi ghcr.io/c4illin/convertx:latest

If Docker warns that the image is still in use, ensure the container above has been fully removed.

🧼 Step 3: Clean Up Docker’s Storage

Now remove the leftover overlay layer containing the malware:

docker system prune -a --volumes

Confirm with y when prompted.

This will safely remove:

The infected overlay layer
Unused images and containers
Any residual malware files
🔍 Step 4: Verify the Malware Is Gone

Run:

sudo find /var/lib/docker -type f -name "XXmaCchN"

Expected result: No output.

[C4illin]

There is no malware in ConvertX and no article on Google mentions the malware you wrote. Please send link

[DrSavignano]

I am wrong with the article, it was another software. I removed that statement from my comment. However, the issue still stands that it was in with Convertx.
My apologies on the incorrect statement about Google Discovery.

[C4illin]

Send the article showing "However, the issue still stands that it was in with Convertx."