this morning, I watched a monthly webinar about IT-Security. One of the actual topics was the malware "mumblehard". This malware makes your server to a part of a botnet and sends spam via email. The malware is locate in the /tmp or /var/tmp folder. So I looked up to this folder and I saw a few folders. One of them was an owncloud folder, which named "owncloud-occ23cq12x22...". The moderator of the webinar said, that a folder with chars like in this example above is the malware folder. I restarted my server, because the tmp folder will be cleared. Now ist is nothing in this folder (mc folder for midnight-commander only). Is it possible, that this was the malware or is it normal, that owncloud create this tmp folder? I have installed owncloud on my webserver.
Thanks