Questions tagged [malware]
Questions relating to malicious software
447
questions
0
votes
1answer
52 views
Chrome Consuming a lot of CPU Resources (Possible bg Crypto Miner)
community,
It's been a month and I feel there is some fishy things going on in my chrome ubuntu 20.04. I think there is a possibility of a miner script running in the background.
With hardly 10 open ...
0
votes
1answer
28 views
Is downloading a pdf from google drive resource intensive? (firefox)
I tried downloading three pdfs via google drive through firefox.
All of a sudden, my laptop - lenovo ideapad 330s heated up while the pdfs havent finished downloading at all. I downloaded htop to see ...
1
vote
1answer
42 views
I possibly installed malware, help please
I was looking for a Twitter app on Ubuntu Software Centre and I downloaded a fake Twitter app from snapcraft. Didn't notice and didn't read the comments before I hit install, like an idiot. The name ...
0
votes
0answers
74 views
ClamAV MD5 sum based whitelists (*.fp) don’t work in Ubuntu MATE 20.04.2
Trying to make ClamAV ignore several files. These are almost cryptocoin miners which I do use. Cryptocoin miners get flagged by most antivirus programs for they can be distributed as malware (using ...
1
vote
0answers
53 views
What are people using currently for virus and malware checks? [duplicate]
What are people using currently for virus and malware checks? I realize there is far less need for this with Linux than with Windows, but I still prefer wearing a seat belt just moving my car out of ...
0
votes
0answers
29 views
Possible Spectre V2 on my computer
So when i was fiddeling with my computer i ran the command dmesg | grep Spectre and i get the result
[ 0.141500] Spectre V2 : Mitigation: Full generic retpoline
[ 0.141501] Spectre V2 : Spectre ...
0
votes
1answer
91 views
Disk Full, Can't login
I'm running Kubuntu 20.10.
I had at least some 5 GB free earlier today. Then apps started acting up. I checked in dolphin, and found I had 0 GB free. I cleared space, at least 2 GB, but it filled up ...
0
votes
0answers
40 views
Unknown display font detected on ubuntu
I just suddenly started seeing what is in the screenshot below and I don't know how it came to be. I don't even know if it is a virus or so. Surfed the internet for solutions but found none.
How can ...
0
votes
1answer
113 views
Ubuntu / Linux / Windows Virus wrote to my “read only” 20.04.1 Live USB (Twice!) and infected two separate live USB's! How is this possible?
Ok. Hang on to your hats! This is going to sound crazy but I have been attacked by some crazy hacker malware. I believe it started out as a file-less attack on my Widoze 10 Home partition and spread ...
1
vote
1answer
63 views
Is rkhunter still required and appropriate? Nothing seems to have been written on it since 2015. Thanks
I want to use my Ubuntu 20.10 Groovy Gorilla desktop for internet banking and making purchases. Good digital hygiene is of course the first defence but i'd like to make sure that rootkits are ...
1
vote
1answer
386 views
kinsing miner fix - help needed
Ineed some help removing this kinsing virus (bitcoin miner).
Currently I have this script running every 5 minnutes via a cronjob
sudo kill $(pidof kdevtmpfsi) || True
sudo kill $(pidof kinsing) || ...
1
vote
1answer
68 views
What does the Clamtk network setting do?
As mentioned in the question, what does the network setting for clamtk do? It seems that it is not clearly documented in the clamav/clamtk documentations. I have basic knowledge of what is a IP ...
0
votes
0answers
28 views
List of trusted binaries for chkrootkit?
Chkrootkit has the ability to use trusted binaries for system scanning. How do I best go about creating such a list, or at least ensuring that when I run chkrootkit, it's not using compromised files?
...
1
vote
1answer
61 views
Strange file appeared by itself and wouldn't let me delete. Then later disappeared
Hopefully what happened is normal and it's just my general ignorance regarding these things. I know linux doesn't often get viruses but other strange things have been happening on my system recently, ...
0
votes
0answers
100 views
Best log parser for Ubuntu that can parse all the possible information found in a ubuntu system for forensics?
I'm looking for a forensic tool that can help me with parsing all the available information on a system, so any activity that a certain user has done which can be collected needs to be fetched and ...
2
votes
0answers
133 views
Malware in www-data crontab
Every so often I see this in my crontab of the www-data user
I know it's malware but i would like to know how this was changed, to prevent this from happening again.
I have already run several tools ...
1
vote
1answer
372 views
Weird blow fish icon on my taskbar tray
I have this weird icon on my taskbar tray. I worry that it is some malware or something. I cannot execute it or run it. I tried clicking it but it doesn't do anything.
0
votes
0answers
419 views
Ubuntu server 18.04 has been infected by a kdevtmpfsi
My Ubuntu server version 18.04 has been infected by a kdevtmpfsi But it is still coming again and again .
I stop docker service and kill kdevtmpfsi process but starting again
image one
show detail ...
2
votes
1answer
64 views
Launch Nautilus from command line: warnings and errors
I am trying to understand why this suddenly gives me error messages. I have always launched nautilus from the command line and it has always worked. Suddenly I started getting an error message. I ...
1
vote
0answers
28 views
Nautilus launches from command, but gives error not seen yesterday
In terminal I launched nautilus and got this error:
Nautilus-Share-Message: Called "net usershare info" but it failed: Failed to execute child process “net” (No such file or directory)
Why ...
0
votes
0answers
977 views
bash: cannot set terminal process group (-1): Inappropriate ioctl for device
Just received this error >>
bash: cannot set terminal process group (-1): Inappropriate ioctl for device
then the disk partition went into READ-Only mode ; also noticed gnome-software was ...
0
votes
0answers
76 views
Do any Linux malware detectors find cryptocurrency malware?
Lately I've seen more talk about the dangers of crypto mining malware, especially a new one called Lemon_Duck. I would like to protect my systems from these intrusions, but cannot find any application ...
1
vote
1answer
62 views
Why it is hard for virus to crack Linux file system although it is so open? [closed]
I've just started my journey in Linux by installing Ubuntu 20.04 LTS, trying to learn about it's file system and working method and faced a question that why a normal user doesn't face any virus issue ...
0
votes
0answers
33 views
Keep getting the following message
I am running Ubuntu 20.04. Since reinstalling the operating system (I could not connect to the internet as my ISP kept blocking it). I get the following message
Message reads: potential malware alert....
0
votes
1answer
36 views
Null/blank processes on Ubuntu
I am using Ubuntu 20.04 LTS with Mate. Recently I am observing blank processes in System Monitor as shown in the image. Usually, there is only one but sometimes there are a lot as in the image below. ...
0
votes
1answer
76 views
Possible malware? - Installed wrong package - Ubuntu 18.04 [duplicate]
Accidentally installed wrong package sudo apt install netplan instead of sudo apt install netplan.io from official Ubuntu repository.
I run Ubuntu 18.04, I wanted to edit DNS servers, but instead I've ...
0
votes
0answers
96 views
Crypto-mining maleware that disable input and output devices
I recently find my computer monitor sometimes shuts down itself and cannot be wake up by tying on my keyboard or my mouse. I turned off and on the monitor, but it shows 'no input signal'. I changed ...
0
votes
1answer
77 views
Does “forked into the background, PID xxxx” means that i executed a malware?
I am a complete newbie in Linux and I was given 2 executable malware files. I used the sudo ./filename command and a message popped up saying "Forked into background, PID XXXX". Does that ...
0
votes
0answers
48 views
Found a folder named '~' in my home dir. Should I be worried?
I just found a folder named: ~ in my home directory. It had a little red cross on its bottom right corner,like root folder have. It was empty. When I deleted it, I was prompted to enter my login ...
0
votes
0answers
135 views
Kill this clamd process running from another user which I never know about
From HTOP
Hi, there is a clamd process running from a user called "tcpdump" I google and found that it's not quite a real user, so I remove that user. However, this process still running and ...
0
votes
1answer
59 views
Need to check the files that are being uploaded from my system in the background
I've noticed in the System app that sometimes high upload speed, even when there's no application running.
I suspect this could be the work of some malware, and so I'd like to check which IP is being ...
0
votes
1answer
100 views
New unknown users appearing on ubuntu, virus?
there are these two users periodically appearing in my ubuntu system ('jicofo','jvb') I have deleted them twice (in 19.10) but they reappeared again, so I thought I'd look into it and turns out they ...
0
votes
1answer
124 views
ClamTk found Trojan.Generic-6888382 in Javascript directory
TROJAN IN Ubuntu 20.04 LTS - JAVA SCRIPT
I run ClamTK and it finds Trojan.Generic-6888382 in usr/share/javascript/jquery-ui.min
I delete it, but then it's there again. I quarantine it, but it's there ...
0
votes
1answer
45 views
Ubuntu asked me to update but is not connected to the internet and hasn't been used for weeks
I'm sorry if this sounds dumb. I'm new to linux and ubuntu. I like to play around with it sometimes. Just now i booted up ubuntu from an usb stick. I use a wired connection and ubuntu has airplane ...
0
votes
2answers
106 views
Is snap verified by Ubuntu SnapCraft Team?
Is snap verified by Ubuntu SnapCraft Team similar like Apple in Appstore?
Verification about: It contains malware / spyware / virus / stealing information / unnecessary permission usage or not.
2
votes
2answers
443 views
Can a windows file or virus in any way affect bios or Ubuntu?
first of all, this is my first question on this site or anywhere for that mater, so excuse any mistakes or the lack of info I might provide, I'll try my best:).
I have recently installed a program on ...
0
votes
0answers
106 views
AndroiBox of AndroPytool did not work
When I ran andropytool on Ubuntu 18.04, an error occurred that Androibox could not work
'''
(droidbox_env) root@d8e5070d137a:/# cd AndroPyTool/
(droidbox_env) root@d8e5070d137a:/AndroPyTool# python ...
0
votes
1answer
73 views
Mystic activity when idle
When my computer is running idle with no programs running i can see unusual spikes in the processor and network activity in the system monitor. I has been like this for quite a while. It happens even ...
1
vote
0answers
58 views
Is there any way to check/verify if a ppa repository is safe, or has been flagged by someone for some reason somewhere on the internet? [duplicate]
You ve got a lot of ppa repos out there, and everyone seems to link add and download from these without checking (i assume). Is there a way to verify safety of a ppa somewhere on the internet ?
0
votes
1answer
107 views
is there a chance that malware will affect my windows partitions? [duplicate]
My question is :
Same I dismount?
affect my windows partitions?
Sorry my english grammar
0
votes
0answers
46 views
Malware lab without virtual machines (Lubuntu as server/gateway)
I would like to set up a malware lab without virtual machines.
On one laptop I have Windows 10, on the other Lubuntu, which will be used as a gateway/server. On the latter, I want an ethernet ...
0
votes
1answer
78 views
Spam in Notifications
I'm seeing the following message in my notifications: HA BAШE ИMЯ ПPИШEЛ ФИHAHCOBЬIЙ ПEPEBOД...
Google translate gives this as HA YOUR NAME WAS FISHED...
I can't clear the notification for some ...
0
votes
1answer
654 views
Clamav False Positive and Linux Viruses statistics
I use Ubuntu Studio 19.10.
After to use Clamav (with Clamtk GUI) to scan my PC, I found a lot of LibreOffice files, macros mostly, which Clamav shows as "Possible dangerous threats". But, I guess it ...
0
votes
2answers
217 views
How to stay safe on Ubuntu [duplicate]
I am a complete noob to linux. And I have installed ubuntu on my laptop.
My concern is Security. A lot of sources online say I don't need any anivirus software, can someone explain why this is? I ...
0
votes
1answer
45 views
Unidentified JS file on desktop
I noticed just then an unidentified file with a .js extension on my desktop. I double-clicked it before thinking about it and it opened as text with Pluma (my default text editor). Should I be ...
-2
votes
2answers
155 views
Nervous about this application. Could it be Malware? Can i find out?
I don't know what is, I won't click it and you can't right-click the link. How can I figure out what it is, and if it is malware how can I identify it as such?
25
votes
1answer
10k views
Windows Defender reports Win64/Longage Trojan malware in Ubuntu 18.04.3 live server
Windows Defender 8 Dec 2019 reports Win64/Longage severe Trojan malware in Ubuntu 18.04.3 live server, file:
ubuntu-18.04.3-live-server-amd64.iso->
pool\main\l\linux\linux-modules-4.15.0-55-...
3
votes
0answers
93 views
Ubuntu Hacked - Attempted to Kill Init
I recently got hacked via Omegle. I realised that the person was able to control my cursor and my keyboard as well. So, I shut off my machine as soon as I realised it.
I turned it on later, to ...
1
vote
3answers
133 views
chrome popups / malware
I've got a school lab with Ubuntu 18. On some computers, when Chrome is open I'm getting popups saying things like "local weather" or "Sandra transferred $99,999.00 PayPal" and the like.
chrome://...
2
votes
3answers
261 views
How can I track down what is giving my desktop spam notifications?
I'm getting desktop notifications when I log in. They look simply like news headlines. I thought they were some new part of Ubuntu. Clicking on these leads me to websites like investing-review.com ...
