this is most likely a false positive of your scanner tool ... you can check the md5 sums of these two binaries against the package md5 sums under /var/lib/dpkg/info/libc-bin.md5sums and /var/lib/dpkg/info /busybox-static.md5sums to see if anything has modified them.
** Changed in: busybox (Ubuntu) Status: Confirmed => Invalid -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to busybox in Ubuntu. https://bugs.launchpad.net/bugs/1546187 Title: Trojan MrBlack-AN Status in busybox package in Ubuntu: Invalid Bug description: I used avast antivirus with ubuntu 16.04 and found Trojan ( ELF:MrBlack-B [Trj]) in files /bin/busybox and /sbin/ldconfig-real To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/busybox/+bug/1546187/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp