[SOLVED] WTH is this??

tmoble · 02-13-2019, 02:23 PM

15475201123623415433.sh

found this running on my machine while looking for whatever it is that's making my internet stutter so bad it's unusable. Entering a state of the purest stupidity I just killed it from the System Monitor.

anybody got any bright ideas?

google gave me back this on it:
Your search - 15475201123623415433.sh - did not match any documents.

BW-userx · 02-13-2019, 02:31 PM

did you open it up to see what its doing ?? that's what I'd do..

savona · 02-13-2019, 02:32 PM

Try to find the file so you can inspect it:

Code:

find / -name "15475201123623415433.sh"

See if it is in your path:

Code:

which 15475201123623415433.sh

Once you find it, cat it and then share it here so we can help!

Code:

cat 15475201123623415433.sh

If you do find it and don't want it to run any more remove the executable bit.

Code:

chmod -x 15475201123623415433.sh

jefro · 02-13-2019, 03:22 PM

Maybe wireshark some network traffic.

It doesn't look good.

I too would be interested in seeing if there is a file associated to that and see what it reads. Might be tempted to do this from live media to maybe help isolate it's effects.

sevendogsbsd · 02-13-2019, 03:41 PM

Since it's a shell script, or appears to be, curious what the content is. Agree, looks bad...

tmoble · 02-13-2019, 04:09 PM

since I killed it it hasn't come back.

update: find found it in /tmp/ukuu:

tom@mint ~ $ sudo find / -name "15475201123623415433.sh"
/tmp/ukuu/mGbO9IhU/15475201123623415433.sh

cat shows:
tom@mint /tmp/ukuu/mGbO9IhU $ cat 15475201123623415433.sh
#!/bin/bash

LANG=C

ukuu-gtk --install v4.20.2

exitCode=$?
echo ${exitCode} > ${exitCode}
echo ${exitCode} > status
tom@mint /tmp/ukuu/mGbO9IhU $

I remember a uuku update failed awhile back. Must be the leftover crap.

Thanks all for helping, esp savona

savona · 02-13-2019, 04:20 PM

I am glad it turned out to be innocent. I was worried for a minute.

tmoble · 02-13-2019, 04:35 PM

me too. back in my old W days I had a couple virii that looked like that.

tmoble · 02-13-2019, 04:37 PM

savona if you please check my video stuttering post.

https://www.linuxquestions.org/quest...ad-4175647689/