s30acpid.sh file is something virus ?

[nexuscan 1]

Hello all,

 

I am getting this result when I run the synology security advisor.

 

Is that something virus, idk.

 

Edited March 23 by nexuscan

[flyride 750]

Security Advisor reports any startup script that is unknown or modified from the distro as anomalous.

 

You will need to inspect the file and determine if it is malware on your own.  Post the contents here if you'd like more advice.

[Orphée 216]

You probably installed acpid extension with radpill loader.
Is so, it is safe.

[nexuscan 1]

17 hours ago, Orphée said:

You probably installed acpid extension with radpill loader.
Is so, it is safe.

 

yeah I use redpill boot loader on proxmox.

 

Edited March 24 by nexuscan

[nexuscan 1]

18 hours ago, flyride said:

Security Advisor reports any startup script that is unknown or modified from the distro as anomalous.

 

You will need to inspect the file and determine if it is malware on your own.  Post the contents here if you'd like more advice.

 

here is the command that in s30acpid.sh file.

 

#!/bin/sh
#
# This goes in /usr/local/etc/rc.d and gets run at boot-time.

PATH_ACPID=/bin/acpid

case "$1" in

start)
    if [ -x "$PATH_ACPID" ] ; then
# auto by lkm           insmod /lib/modules/button.ko
# auto by lkm           insmod /lib/modules/evdev.ko
            echo "start acpid"
            $PATH_ACPID
            logger -p daemon.info "$0 started acpid"
    fi
    ;;

stop)
    echo "stop acpid"
    killall acpid > /dev/null 2>&1
    logger -p daemon.info "$0 stopped acpid"
    ;;

[flyride 750]

There is nothing inappropriate about that rc script.  You can easily disable that particular check in Security Advisor, or not run it at all.

[Orphée 216]

This is, actually, the ACPI ext module you applied when you built the loader. as already stated.

[nexuscan 1]

okay, thank you so much friends!

 

I will leave like that, simply ignoring this notification on my nas.

 

I hope it will help to other people as well that you shared information about that.

 

thanks a lot !