LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 06-26-2020, 06:37 PM   #1
crujones4
Member
 
Registered: Jun 2020
Location: Atlantis
Distribution: Mint
Posts: 66

Rep: Reputation: Disabled
Best way to find malware/spyware w/o external app or antivirus? [Mint]


I'm running Linux Mint on a Minibox Mini Pro 2 [only a couple weeks old], believe I may have installed it incorrectly, and noticed two times so far a severe lag, where one time it froze completely, and the other time, it slowed down considerably for about 20 minutes.

As it's new, and there's hardly anything on it, I had to presume someone got access to it because of possible wrong order while first setting everything up. Is there a way to look in my code for specific irregular lines?

Any and all help would be appreciated;
Linux is supreme.

-Much appreciation,
and of course with kindest regards
 
Old 06-26-2020, 07:31 PM   #2
jefro
Moderator
 
Registered: Mar 2008
Posts: 22,029

Rep: Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632
I guess you'd have to check via md5 or shal???

Might be that you are out of ram and using swap file a lot??

I had one OS BeOS that would test install but not sure why linux has never done that except for a few on first boot.
 
Old 06-26-2020, 07:48 PM   #3
cordx
Member
 
Registered: Oct 2018
Location: texas
Distribution: bodhi 5.1.0
Posts: 797

Rep: Reputation: 184Reputation: 184
Quote:
Originally Posted by crujones4 View Post
believe I may have installed it incorrectly, and noticed two times so far a severe lag, where one time it froze completely, and the other time, it slowed down considerably for about 20 minutes.

As it's new, and there's hardly anything on it, I had to presume someone got access to it because of possible wrong order while first setting everything up.
those bolded statements make it seem more likely that you are feeling the effects of system errors. have you checked any logs to see if they are telling you anything helpful?
 
Old 06-26-2020, 08:08 PM   #4
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,418
Blog Entries: 28

Rep: Reputation: 6167Reputation: 6167Reputation: 6167Reputation: 6167Reputation: 6167Reputation: 6167Reputation: 6167Reputation: 6167Reputation: 6167Reputation: 6167Reputation: 6167
Please tell us more about the specs of your computer.

There are also a number of utilities that might help you figure out what's going on.

In particular, top and htop can tell you what processes are using how many resources. Note that these are command line utilities; you will not find them on the menu.

Last edited by frankbell; 06-26-2020 at 08:09 PM. Reason: grammar
 
1 members found this post helpful.
Old 06-26-2020, 09:32 PM   #5
crujones4
Member
 
Registered: Jun 2020
Location: Atlantis
Distribution: Mint
Posts: 66

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by frankbell View Post
Please tell us more about the specs of your computer.

There are also a number of utilities that might help you figure out what's going on.

In particular, top and htop can tell you what processes are using how many resources. Note that these are command line utilities; you will not find them on the menu.
So I installed HTop, and the are literally t h o u s a n d s of processes seemingly running.
Is there any way to safely send a the list? Are you looking for anything in particular?

-Seriously appreciate the consideration and help
 
Old 06-26-2020, 09:35 PM   #6
crujones4
Member
 
Registered: Jun 2020
Location: Atlantis
Distribution: Mint
Posts: 66

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by jefro View Post
I guess you'd have to check via md5 or shal???

Might be that you are out of ram and using swap file a lot??

I had one OS BeOS that would test install but not sure why linux has never done that except for a few on first boot.
@Jefro...
I'm honestly not even sure what that means. :/
I can't imagine it being RAM though, because the only two times it happened, only a few lighter apps were running, and there's quite of bit of space, with hardly anything on it.

-Thanks
 
Old 06-26-2020, 09:37 PM   #7
crujones4
Member
 
Registered: Jun 2020
Location: Atlantis
Distribution: Mint
Posts: 66

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by cordx View Post
those bolded statements make it seem more likely that you are feeling the effects of system errors. have you checked any logs to see if they are telling you anything helpful?
How would I do that,
and what would I be looking for?
Very few things on here, plenty of room, and nothing too out of the normal;
everything is seemingly up to date though. Only happened twice.
 
Old 06-26-2020, 09:54 PM   #8
cordx
Member
 
Registered: Oct 2018
Location: texas
Distribution: bodhi 5.1.0
Posts: 797

Rep: Reputation: 184Reputation: 184
Quote:
Originally Posted by crujones4 View Post
How would I do that,
and what would I be looking for?
i think what the other suggestions as well as your responses point to is that your lack of familiarity with a newly installed operating system (which is totally understandable) on a new computer has lead you to diagnose the problem as malware/spyware which is more of a windows problem/typical diagnosis.

htop is a great place to start getting to know what your system looks like while it is running. you can configure it to show you about how much cpu and ram you are using among other things. feel free to leave it running while you go about other things and try to spend some time checking it every now and again to see what a normal load on your system is like.

frankbell also asked about your computer specs (specifications). knowing those will help people get an idea what your system is capable of in relation to running mint. at a minimum knowing what kind of cpu and how much ram you have will be helpful.
 
1 members found this post helpful.
Old 06-26-2020, 09:58 PM   #9
crujones4
Member
 
Registered: Jun 2020
Location: Atlantis
Distribution: Mint
Posts: 66

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by cordx View Post
i think what the other suggestions as well as your responses point to is that your lack of familiarity with a newly installed operating system (which is totally understandable) on a new computer has lead you to diagnose the problem as malware/spyware which is more of a windows problem/typical diagnosis.

htop is a great place to start getting to know what your system looks like while it is running. you can configure it to show you about how much cpu and ram you are using among other things. feel free to leave it running while you go about other things and try to spend some time checking it every now and again to see what a normal load on your system is like.

frankbell also asked about your computer specs (specifications). knowing those will help people get an idea what your system is capable of in relation to running mint. at a minimum knowing what kind of cpu and how much ram you have will be helpful.
Thanks for the advise--there are thoouuussaannnds of things active though. Where would I even start?
Also: Am I looking for anything in specific among the thousands of things? H a h.
Specs--not sure what you're asking about in truth.

-Seriously appreciate the help guys
 
Old 06-26-2020, 10:37 PM   #10
cordx
Member
 
Registered: Oct 2018
Location: texas
Distribution: bodhi 5.1.0
Posts: 797

Rep: Reputation: 184Reputation: 184
if you don't know what you are looking at, then telling which among those many many things is out of the ordinary will be pretty much impossible.

specifications refer in general to the system components that are used in your computer. things like your CPU and RAM among plenty of other things. mint has a system details program. after you open the menu, if you start typing "system info" (without the quotes) it will find the program for you.
 
1 members found this post helpful.
Old 06-27-2020, 12:33 AM   #11
obobskivich
Member
 
Registered: Jun 2020
Posts: 601

Rep: Reputation: Disabled
Something to note, because I had to 'figure it out' too at one time, htop does not display running processes in the same way as Windows Task Manager (and to a lesser extent the OS X equivalent, the name of which escapes me). That is, it shows what command is lined-up to a specific PID, whereas Windows Task Manager shows things at the 'application' level, and rolls up all of the PIDs/commands into a single 'application' like 'Internet Explorer' or 'Winamp' (which actually represents more than just 'one' if you view the expanded processes/performance information). If you switch htop to the 'tree' view this can help sort out what exactly is going where (hit F5 to switch to Tree - you can also collapse 'up' to tasks with F6). Seeing 500-600 threads (of which most are not actively running) is pretty typical on my Xubuntu and Ubuntu boxes, and this is also (Believe it or not) pretty typical in Windows too ('total threads' is shown in the Performance tab of Task Manager - I know OS X can also report this but I am blanking on which tab it is; OS X can also have htop installed).

I'm not saying you do or do not have a 'virus' but just seeing 'relatively a lot' of things in htop is by itself not an immediate cause for concern, especially if the CPU load is very low (for example, ransomware will generally produce a fairly large CPU load as it works to encrypt your data, malware crypto-miners tend to produce huge CPU and GPU loads as they hash, etc).

For reference, I googled "Minibox Mini Pro 2" from the original post, and discovered its an SBC computer. You can read more about it here: https://fit-iot.com/web/product/mbm2-pro/
Overall this looks like a fairly low-spec/low-power machine, so performance hangs depending on the workload may just be part of the experience - it's probably perfect for 'light' workloads but if you're expecting this to run 3D games, do heavy transcoding work, etc it will likely be a less than ideal experience.


What specifically were you doing (and what do you consider 'lighter apps') when the slow-downs happened? How much memory is actually reported as available (e.g. not 'used')? Can you install psensor and see if the CPU is perhaps overheating/throttling during these slow-downs?
 
1 members found this post helpful.
Old 06-27-2020, 10:37 AM   #12
DavidMcCann
LQ Veteran
 
Registered: Jul 2006
Location: London
Distribution: PCLinuxOS, Salix
Posts: 6,155

Rep: Reputation: 2318Reputation: 2318Reputation: 2318Reputation: 2318Reputation: 2318Reputation: 2318Reputation: 2318Reputation: 2318Reputation: 2318Reputation: 2318Reputation: 2318
Rather than using the command line, it may be easier to use a gui tool to examine processes. Look in the menu for a name referring to "tasks" or "monitor". You can get things listed by the amount of memory they use, or their CPU load, and you get a general statement of total load.

One command-line tool that is simple is free, that will simply show if you are low on memory or using swap.
 
1 members found this post helpful.
Old 06-27-2020, 02:46 PM   #13
crujones4
Member
 
Registered: Jun 2020
Location: Atlantis
Distribution: Mint
Posts: 66

Original Poster
Rep: Reputation: Disabled
If I sent the shorter list from System Manager,
would someone be able to go through it, and see if anything was amiss?

-Much appreciation again
 
Old 06-27-2020, 03:20 PM   #14
michaelk
Moderator
 
Registered: Aug 2002
Posts: 25,839

Rep: Reputation: 5972Reputation: 5972Reputation: 5972Reputation: 5972Reputation: 5972Reputation: 5972Reputation: 5972Reputation: 5972Reputation: 5972Reputation: 5972Reputation: 5972
Is this your computer?

https://fit-iot.com/web/product/mbm2/

Does it have 8 GB RAM?

IF so, on Amazon there is one critical review where there was a noticeable lag when programs "needed a bit of CPU power" The Quad Core Intel Celeron J3455 is not the speediest CPU so what programs are you running?
 
2 members found this post helpful.
Old 06-28-2020, 03:48 AM   #15
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
Quote:
Originally Posted by crujones4 View Post
If I sent the shorter list from System Manager,
would someone be able to go through it, and see if anything was amiss?
No, you need to look at the output in time.
It really isn't hard to figure it out - you can sort processes (running programs) by how much CPU or RAM or disk I/O they use. If you use a graphical systemmonitor, it's just a question of clicking the table headers.
Once you figure out if something is eating so much resources that it could be responsible for a freeze, share that with us by all means!
But just dumping some list here without context is meaningless.
 
3 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Spyware Malware removal software in Linux Mint? Novatian Linux - Security 4 12-13-2014 09:17 AM
Linux spyware/malware remover flashingcurser Linux - Security 9 11-07-2007 04:53 AM
Spyware / Malware Threats? carlosinfl Linux - Security 5 11-24-2005 08:57 AM
On spyware vs anti-spyware primo General 0 11-11-2005 10:28 PM
Spyware/Malware Content filtering? Kaashar Linux - Security 16 03-31-2005 10:06 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 02:43 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration