LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices


Reply
  Search this Thread
Old 07-25-2015, 12:10 PM   #1
bennypr0fane
Member
 
Registered: Jan 2012
Location: Central Europe
Distribution: Manjaro, Kubuntu
Posts: 171

Rep: Reputation: Disabled
PC powers itself on - is it a bot?


Hi, I have no idea what category this should go into, hence the general placement.
My PC sometimes turns on by itself, I haven't been able to identify a pattern yet. It runs Ubuntu server 14.04, although I'm not using it as a server anymore - I just installed Xfce for a GUI and am using it as a regular desktop now. The firewall still has internet ports open though, there's just nothing listening.
I'm wondering whether or not it could have been infected and is working as a bot now. Is it possible that malware makes it up power up when it's off (not asleep, off!)?
It also does that at times when the modem is turned off, so it can't be "on demand", but maybe some schedule. I don't have wake on lan installed either (as far as I can tell...).
What other possible explanations are there for this behaviour?
Do you think I'll have to wipe it completely?
 
Old 07-25-2015, 12:48 PM   #2
ltwilliams58
LQ Newbie
 
Registered: Jun 2015
Distribution: Mint Ubuntu
Posts: 29

Rep: Reputation: 3
I would check the BIOS configuration, there may be some wake on LAN, wake on WLAN or wake on schedule set (powering up at a specific time repeatedly would be an indicator).
 
1 members found this post helpful.
Old 07-25-2015, 01:51 PM   #3
ardvark71
LQ Veteran
 
Registered: Feb 2015
Location: USA
Distribution: Lubuntu 14.04, 22.04, Windows 8.1 and 10
Posts: 6,282
Blog Entries: 4

Rep: Reputation: 842Reputation: 842Reputation: 842Reputation: 842Reputation: 842Reputation: 842Reputation: 842
Hi...

I've never heard of this before but take a look at noidea_77's post here. If you have this setting, it might be worth checking out.

Regards...
 
Old 07-25-2015, 02:28 PM   #4
bennypr0fane
Member
 
Registered: Jan 2012
Location: Central Europe
Distribution: Manjaro, Kubuntu
Posts: 171

Original Poster
Rep: Reputation: Disabled
Hm, good call. It appears there were some wakeup options enabled (see attachment), but I don't remember enabling those, and I don't really know what they do. Disabled them all now, let's see if it keeps switching itself on.
Can something like this be done by malware over the Internet?
Attached Thumbnails
Click image for larger version

Name:	IMG_20150725_210531.jpg
Views:	27
Size:	241.8 KB
ID:	19012  
 
Old 07-25-2015, 03:54 PM   #5
ltwilliams58
LQ Newbie
 
Registered: Jun 2015
Distribution: Mint Ubuntu
Posts: 29

Rep: Reputation: 3
Quote:
Originally Posted by bennypr0fane View Post
Can something like this be done by malware over the Internet?
That's a good question, but I don't know the answer. I suppose if the data can be written while the OS is running, then anything is possible.
 
Old 07-26-2015, 03:24 PM   #6
bennypr0fane
Member
 
Registered: Jan 2012
Location: Central Europe
Distribution: Manjaro, Kubuntu
Posts: 171

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by ltwilliams58 View Post
That's a good question, but I don't know the answer. I suppose if the data can be written while the OS is running, then anything is possible.
Well I for one cannot make any changes in Bios while the OS is running, can I? It's necessary to reboot, shutting down the OS to get into Bios. The way it looks in my, albeit very very schematic understanding, is that Bios does something to get the Os booted, but the Os never does anything to Bios (i.e. there is no "channel" for information to travel the other direction), yes?
 
Old 07-28-2015, 03:52 AM   #7
rhubarbdog
Member
 
Registered: Apr 2015
Location: Yorkshire, England
Distribution: Linux Mint
Posts: 145

Rep: Reputation: Disabled
There's no reason that malware couldn't attempt to manipulate the bios. I don't believe it to be write protected.
Should the bios be ok, try reloading the operating system. It may be a genuine electronic problem where a fault creates curcuit noise allerting the power management system.
 
1 members found this post helpful.
Old 07-28-2015, 04:07 AM   #8
273
LQ Addict
 
Registered: Dec 2011
Location: UK
Distribution: Debian Sid AMD64, Raspbian Wheezy, various VMs
Posts: 7,680

Rep: Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373
I would more likely put this down to either you having played with the settings when you first bought the machine and accidentally or otherwise turned this on or somebody else who has access to the machine doing it to wind you up. Or even a previous owner of the machine setting it up if it's not brand new.
This isn't to say that it cannot be malware setting it just that it seems the least likely option to me as it's not something I have heard of and from what I can gather it would be difficult to do especially without targeting it to a specific BIOS.
 
1 members found this post helpful.
Old 08-16-2015, 11:04 AM   #9
bennypr0fane
Member
 
Registered: Jan 2012
Location: Central Europe
Distribution: Manjaro, Kubuntu
Posts: 171

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by 273 View Post
I would more likely put this down to either you having played with the settings when you first bought the machine and accidentally or otherwise turned this on or somebody else who has access to the machine doing it to wind you up. Or even a previous owner of the machine setting it up if it's not brand new.
This isn't to say that it cannot be malware setting it just that it seems the least likely option to me as it's not something I have heard of and from what I can gather it would be difficult to do especially without targeting it to a specific BIOS.
You're right, it's probably the first thing you mentioned. That's good because it doesn't compel me to do a fresh install (although that might be in order sometime soon anyways).
thanks everyone!
 
  


Reply

Tags
bot, power on, wol



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Bot member TobiSGD LQ Suggestions & Feedback 2 06-24-2011 12:56 PM
Not a spam-bot! GradientDrift LinuxQuestions.org Member Intro 2 08-21-2008 03:03 AM
I'm not a bot roderickm LinuxQuestions.org Member Intro 3 04-13-2007 03:11 PM
Openkore bot altainta Linux - Games 2 04-11-2006 07:55 AM
what is a BOT? sharathkv Programming 5 11-22-2003 12:21 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 11:53 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration