The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [malware]

Questions relating to malicious software

Filter by
Sorted by
Tagged with
2
votes
1answer
34 views

Suspicious connections coming from Firefox (possible malware)

I was playing around with Wireshark when I noticed something very suspicious: every time I open Firefox (official build from Ubuntu repos), it immediately connects to a server with an apparently ...
0
votes
0answers
37 views

Why does libreoffice soffice.bin process CONSTANTLY RECEIVE internet bandwidth ? Malware ? Virus ? What?

Why does libreoffice soffice.bin process CONSTANTLY RECEIVE internet traffic ? This is according to BOTH NetHogs and Gnome System Monitor. I was curious about KB/sec internet IO numbers that ...
0
votes
0answers
24 views

I think my server has become part of a botnet, but ClamAV can't find anything

I know virtually nothing about Ubuntu so please be gentle. Recently my server host has contacted me saying they suspect my server is part of a botnet, specifically one that probes TCP ports. They've ...
0
votes
2answers
35 views

Strange Behavoir After Latest Update

I did the latest Update earlier today. Then hours later I was not using the computer, and it was just sitting there idle with nothing to do. Then I noticed the hard drive light flashing constantly, ...
-1
votes
0answers
23 views

download Ubuntu theme from safe source

i usually download my ubuntu themes from Gnome-look.org. but how i can make sure that downloaded themes are safe? thanks for help
0
votes
0answers
22 views

Why my Ubuntu keyboard is acting wierd?

It started with my 'U' key suddenly stopped working when i was typing on some search. 'U' key works when i restart computer, but stops working after sometime. I thought at first that the key is ...
0
votes
0answers
23 views

CPU usage drops when opening system monitor

I recently noticed that whenever I open the System Monitor App the usage immediately drops from 8 cores to 1, like shown in the image. The same problem occurs with htop and top. My OS is Ubuntu 18.04 ...
0
votes
0answers
90 views

Weird notifications popping up on desktop. Maybe a virus?

Some weird notifications are popping up on my Ubuntu that I use just for college. For example: Facebook 1 new private message Now... I haven't used facebook for 4 years and I really don't know why I'...
0
votes
0answers
66 views

Is this a fake softeware update? How do I identify a process id of this dialogue?

The dialogue shown in the bottom of the picture just came up. It looks unfamiliar, so I run software updater manually which completed and be seen in the above half of the picture. The reasons the ...
2
votes
2answers
155 views

Can we disable cron services in desktop?

I was reading about EvilGnome and how it hijacks a system. One of the interesting thing I read was how it uses crontab The Linux implant also gains persistence on a targeted system using crontab, ...
0
votes
1answer
72 views

Unable to delete file whose name starts with “sed”

I noticed this file on my desktop "sedxzNQQm", but it does not display in Nautilus from the Desktop directory. Furthermore, when I try to delete the file I get the following error. What is the best ...
1
vote
2answers
141 views

Crypto miner malware

I keep finding my server with a 100% CPU usage, and it's an ambiguously named process that's hidden somewhere in the /etc/ folder running under root (always a different folder). The first time I found ...
1
vote
0answers
72 views

Why does having Google Chrome installed make Firefox run slower?

I have noticed that on Ubuntu 16.04, when I have Google Chrome installed, Firefox is much slower, crashes more often, and takes longer to boot up. These symptoms (slowness, crashing, longer to boot ...
0
votes
1answer
60 views

Will clearing the write bit on my backup drive protect it from malware?

I've been reading about ransomware and how it can infect not only the main drives but also backup drives if they're connected to the network, and that Linux, although more secure than Windows, is not ...
0
votes
0answers
50 views

Unknown Documents

I am a huge opensource enthusiast, but a programming idiot. So please explain to me like I'm a kid. We're in Europe, I used Ubuntu laptop in the airport about a month ago. I opened LibreOffice the ...
-4
votes
1answer
120 views

How to completely remove anything related to Firefox

My Ubuntu 18.04 device has been infected. there have been fraudulent bank transactions. I need to clean my Firefox completely. Please, help me with steps to completely remove any file related to ...
-1
votes
1answer
83 views

Antivirus/Malware scan tools fro Ubuntu

I suspect that my Ubuntu 18.04 device is infected by a malware or something like that. I have had a fraudulent bank transactions. Can you please help me with the best ways/tools to check if my device ...
-1
votes
1answer
119 views

Installing software via .deb - any real risks?

I'm completely new user of Ubuntu OS, so at first learning some total basics. One of the first things to do - installing Chrome browser, made me already confused. I found a big topic about that (How ...
0
votes
0answers
243 views

How to remove offmp3.app from Chromium?

I do get message of 9xbuddy.org in my Chromium browser. I did find on the Internet that it is a malware. How do I remove it? it is really annoying me when I try to use the browser.
0
votes
2answers
137 views

How to secure Ubuntu from malware/keylogger running on wine

I have Four questions.. A malware might do many things like modifying/encrypting files, taking screenshot, using webcam and microphone, keylogging etc. 1. The default configuration of mapping Z: to ...
0
votes
0answers
40 views

Hotspot connected but no internet on only my MacBook

So I've been using Optimum hotspot for a while, and all of sudden, it started losing internet connection (it says Wifi is connected, but no internet), and now somehow it is fully gone. I have another ...
0
votes
0answers
330 views

The download speed of apt-get update progressively becomes slow

My internet connection is perfect, and I had also tried using the best mirror for downloading the updates, yet apt-get update and apt-get upgrade are extremely slow- it gets stuck with "reading ...
0
votes
1answer
91 views

Is there any known viruses/malware that can infect Ubuntu that came from the usb?

I know that most viruses that can infect the OS from having the infected usb inserted into the PC are mostly Windows only, but is there any possibility that there is one that can affect Ubuntu as well?...
0
votes
0answers
16 views

I got one infected file in ClamAV, now how can I remove it from my system? [duplicate]

----------- SCAN SUMMARY ----------- Known viruses: 6084851 Engine version: 0.100.2 Scanned directories: 84206 Scanned files: 514070 Infected files: 1 Total errors: 25755 Data scanned: 51375.23 MB ...
0
votes
2answers
64 views

Does zeroing a drive equivalent to 'Nuke it from orbit'? [duplicate]

Say I have two OS on my computer, one is Windows, and another is Ubuntu. My Windows apparently has been infected by nasty malware, and it currently making it unusable. However Ubuntu doesn't seem to ...
0
votes
0answers
26 views

Can PUA/PUP/Adware form web pages infect Ubuntu? [duplicate]

I was a Windows user and I used to got lots of adware and PUP in my PC. I changed to Lubuntu but I'm not sure if I can be infected.
0
votes
0answers
36 views

Is running unknown applications in a separate non root account safe?

I'm new to Ubuntu and I have seen people online suggesting to add ppa s and download applications outside the software centre. I know that if I don't trust the publisher it is a security risk. But is ...
0
votes
1answer
56 views

Ubuntu weird process use 60-70 percent of the CPU

Recently I noticed that my VPS is doing a lot of work, I ran 'top' command and I saw a process with a weird name who using 60-70 percent of the CPU (I attached pictures). When I kill those process ...
-3
votes
1answer
99 views

When a document or picture gets infected, does its file type change? [duplicate]

I know infected documents in windows have file extension of .pdf.exe or .jpg.exe . Can you infect a file without changing extension? Is it the same in linux?
12
votes
4answers
7k views

crond64/tsm virus in Ubuntu

Recently I noticed my home server to get painfully slow. All the resources were eaten up by two processes: crond64 and tsm. Even though I repeatedly killed them, they kept showing up again and again. ...
1
vote
0answers
26 views

Safest practice for installing software with potential malware [duplicate]

For a project I have been contracted to work on a collaborating Chinese programmer has provided some software to simplify some tasks. I am unaware whether this software package contains malware or ...
2
votes
1answer
291 views

Why is gnome-calculator scanning my home directory?

I'm currently running Ubuntu 18.04.1 and have gnome-calculator 3.30.1 installed. I'm pretty sure that's the one that came bundled with 18.04. Every time I launch gnome-calculator the following ...
1
vote
2answers
196 views

How do you reset firefox without losing your bookmarks/logins?

I've been getting these black-background text popups in the upper right corner when I have firefox running (they appear even when minimized) and when I click on them it takes me to pages. I'm not sure ...
-1
votes
1answer
119 views

What is recommended for fighting threats on an Ubuntu system? [closed]

I'm fairly new to GNU/Linux and I've recently migrated to Ubuntu because I've heard and read it's one of the best distros to try when you're learning Linux. However, I'm looking for something to ...
0
votes
0answers
274 views

on-going ransomware attack

While I have a lot of experience (including driver level programming), this one is new to me. I'd appreciate any pointers as to how to proceed. I was running Ubuntu 16.04 LTS. I updated daily. And ...
1
vote
0answers
43 views

I have noticed that sometimes my HD is spinning and spinning running “find command” on Xubuntu 16.04.5

When I start my laptop the HD is spinning executing find command without reason, I tried to clean saved sessions, looking in startup programs if there is any command using find command, but I couldn't ...
0
votes
0answers
70 views

getting rid of the `hwatchtvnow` virus

My machine appears to be infected with the search.hwatchtvnow.co virus. I get popups from it regularly. Since I use chrome,firefox and opera, I'm not sure which browser is infected. There ...
0
votes
0answers
233 views

Infected file found without further information in ClamAV scan. Any way to quickly see what it was?

My ClamAV was set up following this answer. I wanted to run it on the whole system, using clamscan -r /, and it told me: Infected files: 1 in the results, without any further information. It looks ...
0
votes
0answers
36 views

meltdown_v1, spectre_v2 capabilities on 18.04 LTS [duplicate]

Hardware more than Operating System related but: When running cat /proc/cpuinfo from the terminal I am given the lovely output: bugs: meltdown_v1_spectre_v2_speculative_bypass The infected CPU is a ...
0
votes
2answers
715 views

Strange CPU usage behaviour with systemd, sleep, initctl or gvfsd processes owned by user

I have noticed in my 'indicator-multiload' application that my CPU usage some time after booting is raised permanently at about 50 to 100 percent. After running 'top' I can see a process owned by the ...
3
votes
2answers
2k views

How to remove naganoadigei.com popup virus

Whenever I click any URL so that will open a new tab with this URL (Please be careful): hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&...
64
votes
1answer
11k views

Notification saying “A new Virus is Stealing Data!” on Ubuntu 18

Recently whenever I open Firefox I get a message in notification center. It's not always the same and it keeps changing. here is an example: It's not always this. It gives other messages too and ...
0
votes
1answer
72 views

Unusuall activity

I'm a new user as you can see, so sorry if the question is boring or imprecise. I upgraded my Ubuntu 16.04 to 18.04 and everything was fine. But after a power outage, something went wrong. It did not ...
2
votes
1answer
162 views

How can I find the origin of a process and stop it permanently?

I have an Ubuntu system running an apache server. I have found a process cache.sh which I think might be a crypto-mining process and which is running all the time on my server consuming up to 98% CPU. ...
0
votes
1answer
88 views

Removing W32/Parite.B virus

I scanned one of my directory with clamscan and it showed that every .exe file is infected: .../file.exe: Heuristics.W32.Parite.B FOUND .../file2.exe: Heuristics.W32.Parite.B FOUND .../file3.exe: ...
7
votes
2answers
4k views

Some suspicious software making request to nmcheck.gnome.org

In the last few days my system has started popping up an Ubuntu default web-browser and making a request to nmcheck.gnome.org website and immediately shutting off. Since this happened I cannot run ...
1
vote
1answer
130 views

Test firefox for virus/hijacker

I am a bit concerned about my firefox being hijacked or something. I went to a website and it opened a pop-up asking firefox to be updated. I knew immediately it was a malicious code because it ...
0
votes
0answers
125 views

zukxd6fkxqn redirect in Firefox

I am running Ubuntu 16.04. While using Firefox occasionally the browser will open another tab then automatically close it. The tab will have an address along the lines of zukxd6fkxqn .com. I know that ...
0
votes
0answers
24 views

Do scripts in cron update when programs are updated?

I have recently found a lot of brute force SSH attempts on my server. As a result of that, I have changed the port of my server and put a few firewalls in place to make it harder for my server to be ...
1
vote
1answer
2k views

Scanning External Drives for Viruses - Ubuntu [duplicate]

So I recently installed Ubuntu onto one of my Computers and would like to uses it to scan external drives USB and what not for viruses that can affect windows PC. Is there a possible antivirus or ...