Folks:

I'm running Debian 7.5/KDE 4.4 and have an odd problem.

Every once in awhile I'll notice something going though my bandwith - I use the KDE network widget; not seriously only 8 - 9 kbps.

I now noticed a furious accessing of my harddrive. TOP shows nothing out of the ordinary, Nethogs too. But I happen to just catch a 'apt-check' blink on Top a few times.

I have ClamAV on the system since a few months ago there was reports of a new malware for linux. It's still installed but I have no clue what is running at times.

Any clues? Any utils I can try to figure out what is running? I have Atop and it doesn't show anything out of the ordinary either.

Have you considered running rkhunter on this host and/or running iptraf in the background with logging?

1 members found this post helpful.

The disk activity might be nepomuk or akonadi. These background services enhance your desktop experience. It is possible that some service periodically checks for package updates, and it might use apt-get as a backend. I don't use KDE so I can't say for sure. But advanced desktops like KDE run a lot of crap by default, so this might explain your "symptoms." Try logging in without X or into another DE and see if the symptoms persist.

1 members found this post helpful.

Thank you two for your help. There is now a suspicious clues. Do you know where I can post the data to find help for this?