[LOG] AhnReport Collection - Report Malware (Linux)
AhnReport is a report file that automatically collects system information, log files, and system information for malware analysis related to AhnLab products.
The collected information is used only for resolving issues, and is not disclosed without permission.
This article describes how to collect AhnReport for requesting malware analysis.
Supporting Operating Systems
Required Kernel Version: glibc 2.3.4 or later
Operating System Version:
- Amazon Linux 2+ (8.0.2)
- CentOS 3.3+
- Debian 9.5+
- Fedora 1+
- Gooroom OS 1.3+
- HamoniKR 1.3+ (1.3 is HamoniKR-ME)
- Hancom Gooroom 2.2+ (8.1.19)
- openSUSE 12.1+
- Oracle Linux Server 5.1+
- Red Hat Enterprise Linux 3.3+
- Rocky Linux 8+ (8.1.25)
- Ruby Duck 5.6 (8.1.9)
- SUSE Linux Enterprise Server 10+
- TmaxGooroom 21+ (8.1.19)
- TmaxOS 3.7.7
- Ubuntu 8.1+
To Create AhnReport for Linux
1. Click [Download AhnReport for Linux] to download and then move the file to /root path.
2. Unzip the moved file in a Linux environment.
mkdir /root/ahnrpt-linux
tar xvfz /root/ahnrpt-linux.tar.gz -C /root/ahnrpt-linux
3. Check the system information and go to the appropriate path for the OS environment.
- For 32 bits
cd x86
- For 64 bits
cd x86_64
4. Execute AhnReport.
./ahnrpt -s [filename.arc] -config mcr
All file names and settings are only supported in English. Make sure to enter the file extensions as .arc.
(e.g.) ./ahnrpt -s test.arc -config mcr
5. If you agree to the privacy policy, enter ‘a’.
To view the privacy policy, enter ‘v’.
6. Once the report is collected, the ‘Complete encryption’ message will be displayed.
Collect the .arc file that was saved in the AhnReport execution path.
(e.g.) Collect /root/ahnrpt-linux/x86_64/test.arc File