LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 04-04-2005, 07:36 PM   #1
poiuytrewq
Member
 
Registered: Jul 2004
Posts: 107

Rep: Reputation: 15
did i get a virus? (FC3)


hi there, two very peculiar things happened today while i was at school. i left my house around 10:00. at this point everything seemed to be running normal. but when i got back around 1:00,
1) firefox had misteriously opened a new tab and navigated to booble.com (a porn search engine that i have never been to before)
2) my display name on amsn (an msn messenger clone ( amsn.sf.net ))had changed to "dan - i never shower" (changed from my real name of dan ). no one had been in my house though, so it was not one of my friends(or enemies... ? )

another thing that i noticed a while back, but never did anything about happens when i run gnome-system-monitor. i get about 7 or 8 processes all with no names, the name column entries are just blank. i dont know if it is relevent or ever a problem or what. i just thought id add it.


anyone know how i can check to see if mycomputer has been comprimiesd?
 
Old 04-04-2005, 08:18 PM   #2
mrGenixus
Member
 
Registered: Dec 2004
Location: Colorado, US
Distribution: gentoo, debian, ubuntu live gnome 2.10
Posts: 440

Rep: Reputation: 30
yes it sounds like you have a variant of the roomate virus....j/k

is there anyone who has access to your machine while you're gone?
 
Old 04-04-2005, 09:04 PM   #3
poiuytrewq
Member
 
Registered: Jul 2004
Posts: 107

Original Poster
Rep: Reputation: 15
acctually your correct, it was the brother-breaks-in-to-my-house-for-emergency-bathroom-stop-then decides-to-look-at-porn...weird.-variation.
thanks for the help. case closed.
 
Old 04-04-2005, 09:08 PM   #4
mrGenixus
Member
 
Registered: Dec 2004
Location: Colorado, US
Distribution: gentoo, debian, ubuntu live gnome 2.10
Posts: 440

Rep: Reputation: 30
that's hilarious!
 
Old 04-04-2005, 09:34 PM   #5
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
definitely bookmarking this thread.
 
Old 04-05-2005, 02:40 PM   #6
poiuytrewq
Member
 
Registered: Jul 2004
Posts: 107

Original Poster
Rep: Reputation: 15
Re: did i get a virus? (FC3)

edit: oops. i meant to make a new thread, ill just leave it like this though, it works.

Quote:
side tangent from my othere post that was not addressed:
another thing that i noticed a while back, but never did anything about, happens when i run gnome-system-monitor. i always get about 7 or 8 processes all with no names, the name column entries are just blank.
more info:
they are all owned by root
they all take up 0bytes of mem
there "nice"es (what ever that is) are all 0 or -10, and there is alway one left at the botom with 19
one of them expands out into 6 sub processes.

whats going on?

Last edited by poiuytrewq; 04-05-2005 at 02:42 PM.
 
Old 04-07-2005, 12:28 AM   #7
poiuytrewq
Member
 
Registered: Jul 2004
Posts: 107

Original Poster
Rep: Reputation: 15
achoo!!! ^^^^^^^look at previous post ^^^^

exscuse me. sorry about that sneeze there.anyone know whats going on in the previously described problem?
 
Old 04-07-2005, 03:02 AM   #8
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
Take a look at the output of pstree, but I'd imagine that they are just a series of child processes that are spawned to monitor various system and hardware parameters. If you are concerned about the integrity of the binary, just run rpm -V gnome-system-monitor. If you worried about other binaries, run rpm -Va or try rootkit hunter.
 
Old 04-08-2005, 07:14 AM   #9
JaseP
Senior Member
 
Registered: Jun 2002
Location: Eastern PA, USA
Distribution: K/Ubuntu 18.04-14.04, Scientific Linux 6.3-6.4, Android-x86, Pretty much all distros at one point...
Posts: 1,802

Rep: Reputation: 157Reputation: 157
To avoid the brother-in-law virus, I'd log out if you are leaving, or just set the screensaver to lock the screen...
 
Old 04-08-2005, 12:01 PM   #10
michaelsanford
Member
 
Registered: Feb 2005
Location: Ottawa/Montréal
Distribution: Slackware + Darwin (MacOS X)
Posts: 468

Rep: Reputation: 30
Dude, I live alone and I lock my screen when I'm gone.

(What about the superintendant, eh? )
 
Old 05-08-2005, 07:09 AM   #11
comptiger5000
Member
 
Registered: May 2005
Distribution: Fedora Core Since version 3
Posts: 193

Rep: Reputation: 30
then change your password
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
DISCUSSION: DMA with FC3 on a GA-8TRS350MT motherboard with a custom 2.6.12 kernel - FC3 DVD playbac rylan76 LinuxAnswers Discussion 0 08-21-2005 05:18 PM
(FC3) ATI FGLRX Drivers work for months,FC3 update, stop working genixpro Linux - Hardware 2 04-23-2005 09:01 PM
CD3 FC3 Virus Infected zillah Fedora 5 01-19-2005 01:24 PM
Boot virus or Anti-Virus? AVG Free Anti-Virus Software problems SparceMatrix Linux - Security 9 08-02-2004 02:35 PM
trend chipway virus detected boot virus rafc Linux - Security 1 05-13-2004 01:44 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 10:14 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration