strange login problem

campher · 01-04-2010, 07:38 AM

after a fresh install of slackware 12.2 i switched to boot directly into runlevel 4. then i installed some third party packages like wine, kile, conky, and flashplayer-plugin.
now when i switch to runlevel 3 i get the normal login prompt. after typing in user name and password a lot of characters are flooding the screen and then the character set gets messed up. an "a" is some strange "ÿ" and so on. the flooded characters belong to a .exe file which has something to do with mozilla software.
a similar thing happens when i log in via ssh. this time a different .exe file is spilled over the screen and the character set stays normal.
the terminals in kde are not affected by this.
i checked the issue, rc.local and profile files and the profile.d directory for the source of those .exe files but didnt find anything. changing login shell from bash to ash didnt solve the problem.
now im running out of ideas where to search.
next question is where did this come from.

any ideas would be appreciated.

campher

samac · 01-04-2010, 07:48 AM

Slackware does not install any .exe files as these are Windows executable (binary) files. You must have installed something with wine and set it to run at start-up. Boot with your Slackware install media and have a look. Try ps -ax or top. You can look for .exe files with slocate .exe

samac

voyciz · 01-04-2010, 07:52 AM

I hope you mean executable binaries and not actually files with a .exe suffix.

This only happens when you login successfully, correct? If you entered an invalid password, it wouldn't happen?
Try adding a line in /etc/profile like:
/usr/bin/ps aux > /home/me/whatsrunning
...maybe you'll see something that shouldn't be there.

Create a new user. Does it happen with that account as well?

campher · 01-04-2010, 08:59 AM

dont get me wrong the files spilled on the prompt are really .exe files starting with MZ...

below is the output of a ssh session:

Quote:

root@bxxxx:~/slack122# ssh root@192.168.0.113
root@192.168.0.113's password:
Last login: Mon Jan 4 14:13:47 2010
MZ$¸ëCVh¬Ç^_Â
Vèÿt$ñÿt$Vÿ¨Ñ¸@t}øÿEôÇEøVÿPtÿvdè}t3ÀxEü+E÷Ø%@@¸@¸Â
tWWÿÑÿuøÿÑÿuøÿÑ|
hÌÜ~_t
ÿuôÿÑÖMüè½ÿÿl$éiòÿÿUìì
SVñ3Û9^t3Àé.ÖMøèb x|
h,ßU
RPÿQÀx2}
ÿtPÿQÿtPÿQ ¿VMðèÜµÄÃ8ÿÿÿE¤Àv)E´uÊjÿF|hDÕE*tU*;ÊU¤M°ÇE°°N|uÿE´KSÿu´è,éÿÿ}´h<áèZ2½ÀÏèååÿÿE¨}¤3öjÿhDÕx4ðQPÿSÇu¾3Û9 ^u%èr!Æ^ÉÂ ÑPèvPèôuÿuøÿÑÿuøÿÑÿuøÿÑÿuøÿ@;Ev&3ÒB;Êu<
ÇF4t3É<
Á@;E
N4r¾ëxUü¡ x|WÿuühPä}ø3ÅÿÃEé¤ãÿÿl$éãÿÿl$é·ãÿÿUìQeüvè|lèmx¸O y|ÿ0FPh4é¸ÿuøÿÑÿuøÿÑÿuøÿÑÿuøÿÑÿuøÿÑÿuøÿÑÿuøÿÑÿuøÿÑu f@ËèüÿÿëÿF@ÿ9|§M
+øÁWPËèmÌÿÿ~<+~0ËèMÌÿÿÈ+MEüNDÿètkÿuôÿÑËè¤ËÿÿFD}øÿuôÿÑYYhìÿuøÿÑÿuøÿÑÿuøÿÑÿuøÿÑÿuøÿÑÖMüè§jPè]^|GEÀ|@Hÿù~0wjXjF4jPèÜ[ÿuøÿÑÿuøÿÑÿuøÿÑÿuðÿÑÿuðÿÑÿuðÿÑÿuðÿÑWhüíÃóÿÿl$éóÿÿléóÿÿUìQVñW3ÿjÿÇîÂYD$@0L3ÀPhððèatPÿQ3À¤Ñ]E
PMðèÖ\Y~ÖMüèw\$ÿu ÿuÿuÿuÿuPÿQ4ÆEüt¡ x|ÁhXóÿtPÿQ
ÎèY}
Ãtøë°ÿuF|ÿuNüQPÿR9¾
U¸@ècOt>VEüPEðPÿÓÄ
Mðøè¶NuVEüPEðPÿÓÄ
MðøèNtÇEè\íÿÿ3ÿWE
PEðPÿÓÄ
Àv[h²UÇèöéÞÿÿVñÇèöóÿÿè¸IësE
3ÉÀEøMüvZSU:]ôuV3Ò;Âw9¤u(9u"¾ÿÿÿ¡ uÇuMjhøu)´Phðø¸@^|SVhüúx|ÏèfBt(}
èÔÿÿÿÿMüÇF|ëÏè¸@UìQ¡ xV|ÿuVhüý¸@Pÿuÿu
VèÚúÿÿé¸@ÿuPÿuÿu
VèLùÿÿÇu3À_[^ÉÂ(èê¦ÿÿjÿWN4èß¦ÿÿjÿWN@èÔ¦ÿÿjÿWÕÀÿuøÿÑÿuøÿÑÿuøÿÑÿuøÿÑÿuôÿÑÿuôÿÑÿuôÿÑ0;Âv+Âë3À z|ÿq,Ph¬ÖMüè 8ÿuøÿÑÿuøÿÑÿuøÿÑÿuøÿÑÿuøÿÑ ÑVÿPdÀxÿt$häé¸@HÕÿ×Y~LtkEôPÿ¤ÑPè!"ÿuøÿÑÿuøÿÑÿuøÿÑÿuøÿÑÿuøÿÑÿuøÿÑÿuðÿÑÿuðÿÑÿuðÿÑÿuðÿÑWhÄÿÓYYÿ~WUFøRPÿ Q4ëÁÿXÑÿì¸@x£}~~~~ ~$~(~,~0èIÿÿ~D~H~L~P~T~X~\~`9= uh,ÿ(ÑYY3¸@öu¸@Vhÿ×YY_Æ^Ãl$é©üÿÿl$éÆüÿÿVñÇ( ÇF ¡$ x|Vh` ÿ Ñ¸@¸@ÿfÿ Ñ}ìEð}ôè#ÿ Ñÿ Ñÿ ÑMèè&ÿÿjÿÿu
EèWjÿPÿ°ÑM
h¼ÿEà9]ÞÿÿEÜURhPÿ×@PÿÑÿ Ñ]üè¬PèhUD$ÀüPèåôÿÿ3ÀÂR`öYYtÿÈÐÄ
ó3ÛÆ\FëÛt~Sj\VèñE
ëFAÀuöFÂ:tãjD^VEWPè§3Í[è*ÿuøÿ×Èÿë6EôEüëEüMø
U
$ z|PQh¤
ÿ Ñ4ÐF
@0Àt 0èÍ@0Àt $ÿÿÿVñ~ÉÂVÿuÿuSÿÐÂÇ8ÿ9ræ¸T_^[]ÂÄ
ÉtÐ^U
@;EüróÈÿÉPÁPVÿ¨ÑRÁPVÿ¨ÑVt}
ÇÎèý]ÿÿ^ÉÂìQeüÃ[É3À@^Ã&p#è»jèÙÊýÿÿ¡ØÀtWjl#5ÐMZt3ÀÃA<Á8PEÿt$ÿ Ðæ@»ë
óuÆÁà
´aÔwListenerÔÕ
%x

!"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~›*¡¢£¤¥¦§¨©ª«¬*®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàá âãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ

!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~›*¡¢£¤¥¦§¨©ª«¬*®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàá âãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ6R_SetPollableEventeAastError_inittermServiceManagerilteru <dependency>
<dependentAssembly>
<assemblyIdentity type="win32" name="Microsoft.VC80.CRT" version="8.0.50608.0" processorArchitecture="x86" publicKeyToken="1fc8b3b9a1e18e3b"></assemblyIdentity>
</dependentAssembly>
</dependency>
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXX PADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADD INGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGP ADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDI NGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXX PADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADD INGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGP ADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDI NGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXX PADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADD INGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGP ADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDI NGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXX PADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADD INGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGP ADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDI NGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXX PADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADD INGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGP ADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDI NGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXX PADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADD INGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGP ADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDI NGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXX PADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADD INGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGP ADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDI NGXXPADDINGPADDINGX;=Ë=ã=ï=õ=>'>->g>r>x>¸>Â>Ì>?*?Í?Û?á?;ñ;<<\<c<j<q<x<<<<¤<<<<t<<<¶<Ý<ÿ<;º;À;>>>¶>Ã>Y?g?m??½?Î?Ô?;
==*=9=G=M={=µ=Ñ=ß=å=>M>w>>©>³>Ï>Þ>ü>A?H?O?_?n?t??¹?¶6Æ6Ë6þ617k7r77°7µ7)868b88£8¯8½8Ã89›9¡9Õ9ÿ9
:B:i:~::¡:*:´:Æ:Ñ:×:;;G;R;X;};;;Î;Ù;ß;<0<6<F<T<Z<<º<Ç<=*=0=S=a=g===É=E>S>Y>s>~>>Û>é>ï>A?L?R?¤?¯?¶?¼? Ì?å?4©4½4®5ã6ê6ò677*7¦7¼7Ë7Ñ78)8Q8^8l8r888®8´899$9O9Z9`999Ë9ß9:::3:?:N:T::¤:ª:Á:*;5;;;;§;¿;É;æ;ì;l<x <~<°<¿<Å<Ó<Þ<ä<ü<==,=2==›=Û=>>!>2>A>O>^>>>>Á>á>ì>ò>
?'?.?5?E?T?Z?t?·?ö?33¤3«3*494?44›4¢4À4Ë4ß4ë4ò4!5,525d5r5z5ª5¿5Ó5ï5
777F7`7{77›7¡7Ö78,8:8@8{8µ8ß89979F9d99¯9µ9K:q:::;;;Ñ;Ý;ã;<<<#<.<4<z<<<<Ñ<Ø<Þ<ä<ú< ==0=X=e====¤=²=¸=æ=ô=ú=?>E>M>b>i>v>|>>¨>¯>è>ö>ÿ>%?@?L?k??*?«?±?Ð?Â1Ñ1è1ñ1
root@bxxxx:~# exit
logout
Connection to 192.168.0.113 closed.
root@bxxx:~/slack122#

on a console session after an init 3 a different file will be spilled out.

voyciz · 01-04-2010, 09:02 AM

You really should find out what's running following the above suggestions.

campher · 01-04-2010, 10:09 AM

in the list of running processes there is nothing really suspicious, as far as i see. there is a lot of stuff not necessary but i did set up the system just a few days before and didnt optimise it yet.

Quote:

USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.0 772 300 ? Ss Jan01 0:03 init [4]
root 2 0.0 0.0 0 0 ? S< Jan01 0:00 [kthreadd]
root 3 0.0 0.0 0 0 ? S< Jan01 0:01 [migration/0]
root 4 0.0 0.0 0 0 ? S< Jan01 0:12 [ksoftirqd/0]
root 7 0.0 0.0 0 0 ? S< Jan01 0:12 [events/0]
root 9 0.0 0.0 0 0 ? S< Jan01 0:00 [khelper]
root 115 0.0 0.0 0 0 ? S< Jan01 0:00 [kblockd/0]
root 118 0.0 0.0 0 0 ? S< Jan01 0:00 [kacpid]
root 119 0.0 0.0 0 0 ? S< Jan01 0:00 [kacpi_notify]
root 210 0.0 0.0 0 0 ? S< Jan01 0:00 [ata/0]
root 212 0.0 0.0 0 0 ? S< Jan01 0:00 [ata_aux]
root 213 0.0 0.0 0 0 ? S< Jan01 0:00 [ksuspend_usbd]
root 219 0.0 0.0 0 0 ? S< Jan01 0:00 [khubd]
root 222 0.0 0.0 0 0 ? S< Jan01 0:00 [kseriod]
root 265 0.0 0.0 0 0 ? S Jan01 0:02 [pdflush]
root 266 0.0 0.0 0 0 ? S Jan01 0:00 [pdflush]
root 267 0.0 0.0 0 0 ? S< Jan01 0:00 [kswapd0]
root 311 0.0 0.0 0 0 ? S< Jan01 0:00 [aio/0]
root 329 0.0 0.0 0 0 ? S< Jan01 0:00 [nfsiod]
root 338 0.0 0.0 0 0 ? S< Jan01 0:00 [jfsIO]
root 339 0.0 0.0 0 0 ? S< Jan01 0:00 [jfsCommit]
root 340 0.0 0.0 0 0 ? S< Jan01 0:00 [jfsCommit]
root 341 0.0 0.0 0 0 ? S< Jan01 0:00 [jfsSync]
root 350 0.0 0.0 0 0 ? S< Jan01 0:00 [xfs_mru_cache]
root 351 0.0 0.0 0 0 ? S< Jan01 0:00 [xfslogd/0]
root 353 0.0 0.0 0 0 ? S< Jan01 0:00 [xfsdatad/0]
root 355 0.0 0.0 0 0 ? S< Jan01 0:49 [gfs2_scand]
root 356 0.0 0.0 0 0 ? S< Jan01 0:00 [glock_workqueue]
root 1052 0.0 0.4 27656 12756 ? S Jan03 0:00 kio_uiserver [kdeinit]
root 1068 0.0 0.0 0 0 ? S< Jan01 0:00 [scsi_tgtd/0]
root 1083 0.0 0.0 0 0 ? S< Jan01 0:00 [iscsi_eh]
root 1154 0.0 0.0 0 0 ? S< Jan01 0:00 [scsi_eh_2]
root 1157 0.0 0.0 0 0 ? S< Jan01 0:00 [scsi_eh_3]
root 1160 0.0 0.0 0 0 ? S< Jan01 0:00 [scsi_eh_4]
root 1163 0.0 0.0 0 0 ? S< Jan01 0:00 [scsi_eh_5]
root 1200 0.0 0.0 0 0 ? S< Jan01 0:00 [exec-osm/0]
root 1207 0.0 0.0 0 0 ? S< Jan01 0:00 [block-osm/0]
root 1215 0.0 0.0 0 0 ? S< Jan01 0:00 [khpsbpkt]
root 1284 0.0 0.0 0 0 ? S< Jan01 0:00 [kstriped]
root 1286 0.0 0.0 0 0 ? S< Jan01 0:00 [ksnapd]
root 1292 0.0 0.0 0 0 ? S< Jan01 0:00 [rpciod/0]
root 1299 0.0 0.0 0 0 ? S< Jan01 0:07 [kjournald]
root 1353 0.0 0.0 2160 888 ? S<s Jan01 0:00 /sbin/udevd --daemon
root 2369 0.0 0.0 0 0 ? S< Jan01 0:00 [ktpacpid]
root 2422 0.0 0.0 0 0 ? S< Jan01 0:00 [kpsmoused]
root 2689 0.0 0.0 1748 620 ? Ss Jan01 0:00 /usr/sbin/syslogd
root 2693 0.0 0.0 1704 416 ? Ss Jan01 0:00 /usr/sbin/klogd -c 3 -x
bin 2813 0.0 0.0 1804 484 ? Ss Jan01 0:00 /sbin/rpc.portmap
nobody 2817 0.0 0.0 1872 708 ? Ss Jan01 0:00 /sbin/rpc.statd
root 2827 0.0 0.0 1740 524 ? Ss Jan01 0:00 /usr/sbin/inetd
root 2832 0.0 0.0 3928 1020 ? Ss Jan01 0:00 /usr/sbin/sshd
root 2839 0.0 0.0 3868 1188 ? Ss Jan01 0:02 /usr/sbin/ntpd -g -p /var/run/ntpd.pid
root 2846 0.0 0.0 1696 600 ? Ss Jan01 0:00 /usr/sbin/acpid
81 2858 0.0 0.0 2424 972 ? Ss Jan01 1:10 /usr/bin/dbus-daemon --system
82 2863 0.0 0.1 6124 4224 ? Ss Jan01 0:05 /usr/sbin/hald --daemon=yes
root 2864 0.0 0.0 3076 1032 ? S Jan01 0:00 hald-runner
root 2898 0.0 0.0 3172 1032 ? S Jan01 0:00 hald-addon-input: Listening on /dev/input/event7 /dev/input/event6 /dev/input/event2 /dev/input/event3 /dev/input/event4 /dev/input/event1 /dev/input/event5
82 2903 0.0 0.0 2228 980 ? S Jan01 0:00 hald-addon-acpi: listening on acpid socket /var/run/acpid.socket
root 2904 0.0 0.0 3172 1008 ? S Jan01 0:17 hald-addon-storage: polling /dev/hda (every 2 sec)
root 2922 0.0 0.2 16960 5676 ? S Jan01 3:39 python -O /usr/lib/wicd/wicd-daemon.py
root 2959 0.0 0.0 5260 2008 ? Ss Jan01 0:00 /usr/sbin/cupsd
root 2965 0.0 0.0 1912 640 ? S Jan01 0:00 /usr/sbin/crond -l10
daemon 2967 0.0 0.0 1912 416 ? Ss Jan01 0:00 /usr/sbin/atd -b 15 -l 1
root 2985 0.0 0.2 7712 5440 ? S Jan01 0:46 python /usr/lib/wicd/monitor.py
root 3015 0.0 0.0 1920 488 ? Ss Jan01 0:02 /usr/sbin/gpm -m /dev/mouse -t imps2
root 3029 0.0 0.0 0 0 ? S< Jan01 0:02 [kondemand/0]
root 3038 0.0 0.0 3168 888 ? Ss Jan01 0:00 /usr/bin/kdm -nodaemon
root 3042 1.6 2.6 75340 69848 tty7 Ss+ Jan01 67:44 /usr/bin/X -br -nolisten tcp :0 vt7 -auth /var/run/xauth/A:0-x0IYci
root 3044 0.0 0.0 3472 1168 ? S Jan01 0:00 -:0
root 3100 0.0 0.0 2744 1360 ? Ss Jan01 0:00 /bin/sh /usr/bin/startkde
root 3157 0.0 0.0 1548 144 ? S Jan01 0:00 start_kdeinit --new-startup +kcminit_startup
root 3158 0.0 0.2 24608 7644 ? Ss Jan01 0:00 kdeinit Running...
root 3161 0.0 0.1 24044 2828 ? S Jan01 0:00 dcopserver [kdeinit] --nosid
root 3163 0.0 0.3 26652 8444 ? S Jan01 0:00 klauncher [kdeinit] --new-startup
root 3165 0.2 0.6 41264 15708 ? Sl Jan01 12:19 kded [kdeinit] --new-startup
root 3167 0.0 0.0 3044 1456 ? S Jan01 0:07 /usr/libexec/gam_server
root 3173 0.0 0.0 1684 364 ? S Jan01 0:01 kwrapper ksmserver
root 3175 0.0 0.3 25676 9652 ? S Jan01 0:00 ksmserver [kdeinit]
root 3176 0.0 0.5 28656 12996 ? S Jan01 0:12 kwin [kdeinit] -session 10cde06333000126165855500000037040
root 3178 0.0 0.8 38248 21104 ? S Jan01 0:17 kdesktop [kdeinit]
root 3180 0.0 0.7 34484 18932 ? S Jan01 0:14 kicker [kdeinit]
root 3181 0.0 0.2 25080 7500 ? S Jan01 0:00 kio_file [kdeinit] file /tmp/ksocket-root/klauncherwXkOlc.
root 3186 0.0 0.3 26632 9940 ? S Jan01 0:00 kaccess [kdeinit]
root 3194 0.0 0.7 70512 18764 ? S Jan01 0:34 artsd -F 10 -S 4096 -s 60 -m artsmessage -c drkonqi -l 3 -f
root 3199 0.0 0.5 29564 14352 ? S Jan01 0:00 kmix [kdeinit] -session 10cde06333000126226998500000031820
root 3200 0.0 1.4 58064 37224 ? S Jan01 1:06 python -O /usr/lib/wicd/wicd-client.py
root 3205 0.0 0.0 2732 1316 ? S Jan01 0:00 /bin/sh /usr/bin/firefox
root 3211 0.0 0.1 8588 4084 ? S Jan01 0:02 /usr/bin/Eterm
root 3212 0.0 0.1 8584 4052 ? S Jan01 0:02 /usr/bin/Eterm
root 3214 0.0 0.1 9372 4876 ? S Jan01 0:05 /usr/bin/Eterm
root 3224 0.0 0.0 2788 1380 ? S Jan01 0:00 /bin/sh /usr/lib/firefox-3.0.4/run-mozilla.sh /usr/lib/firefox-3.0.4/firefox-bin
root 3225 0.0 0.5 33228 15228 ? S Jan01 0:00 korgac --miniicon korganizer
root 3231 0.5 4.8 259944 124424 ? Sl Jan01 24:30 /usr/lib/firefox-3.0.4/firefox-bin
root 3234 0.0 0.5 35204 13392 ? S Jan01 0:02 knotify [kdeinit]
root 3259 0.0 0.0 3140 1752 pts/0 Ss+ Jan01 0:00 -bash
root 3318 0.0 0.0 3140 1748 pts/4 Ss+ Jan01 0:00 -bash
root 3319 0.0 0.0 3156 1828 pts/3 Ss+ Jan01 0:00 -bash
root 4941 0.0 0.0 2684 1476 tty6 Ss+ 12:32 0:02 -bash
root 6462 0.0 0.0 0 0 ? S< 11:35 0:00 [migration/1]
root 6463 0.0 0.0 0 0 ? S< 11:35 0:02 [ksoftirqd/1]
root 6464 0.0 0.0 0 0 ? S< 11:35 0:00 [kondemand/1]
root 6465 0.0 0.0 0 0 ? S< 11:35 0:00 [rpciod/1]
root 6466 0.0 0.0 0 0 ? S< 11:35 0:00 [block-osm/1]
root 6467 0.0 0.0 0 0 ? S< 11:35 0:00 [exec-osm/1]
root 6468 0.0 0.0 0 0 ? S< 11:35 0:00 [scsi_tgtd/1]
root 6469 0.0 0.0 0 0 ? S< 11:35 0:00 [glock_workqueue]
root 6470 0.0 0.0 0 0 ? S< 11:35 0:00 [xfsdatad/1]
root 6471 0.0 0.0 0 0 ? S< 11:35 0:00 [xfslogd/1]
root 6472 0.0 0.0 0 0 ? S< 11:35 0:00 [aio/1]
root 6473 0.0 0.0 0 0 ? S< 11:35 0:00 [ata/1]
root 6474 0.0 0.0 0 0 ? S< 11:35 0:00 [kblockd/1]
root 6475 0.0 0.0 0 0 ? S< 11:35 0:00 [events/1]
root 6989 0.0 0.0 0 0 ? S< 11:35 0:00 [iwl3945/0]
root 6990 0.0 0.0 0 0 ? S< 11:35 0:00 [iwl3945/1]
root 7000 0.0 0.0 0 0 ? S< 11:35 0:01 [iwl3945]
root 7135 0.0 0.0 3732 968 ? Ss 11:35 0:00 wpa_supplicant -B -i wlan0 -c /var/lib/wicd/configurations/0022b0c8c4cf -D wext
root 7250 0.0 0.0 1872 260 ? Ss 11:35 0:00 /sbin/dhcpcd wlan0
root 12953 0.0 0.8 42848 21348 ? S Jan01 0:40 kpdf /tmp/S%2BU-Bahn_1312_2009.PDF -icon kpdf -caption KPDF
root 13063 0.0 0.5 31464 14656 ? S Jan01 0:00 konsole [kdeinit] -caption=taillog -icon exec -miniicon ex
root 13067 0.0 0.0 1980 592 pts/1 Ss+ Jan01 0:01 /usr/bin/tail -f --lines=100 /var/log/messages
root 26103 0.0 0.0 3844 1852 pts/2 S+ 16:24 0:00 ssh ubenutzer@192.168.0.113
root 26104 0.5 0.0 6512 1976 ? Ss 16:24 0:00 sshd: ubenutzer [priv]
1005 26120 0.0 0.0 6512 1232 ? S 16:24 0:00 sshd: ubenutzer@pts/6
1005 26121 0.0 0.0 3064 1532 pts/6 Ss+ 16:24 0:00 -bash
1005 26132 0.0 0.0 2348 916 pts/6 R+ 16:24 0:00 /usr/bin/ps aux
root 30444 0.0 0.1 8980 4516 ? S Jan03 0:02 /usr/bin/Eterm
root 30446 0.0 0.0 3128 1792 pts/2 Ss Jan03 0:00 -bash

with a new useraccount it happens too

campher

voyciz · 01-04-2010, 10:14 AM

No, I meant to add it to /etc/profile, look above. You want to know what's running as soon as you're logged in, not afterwards.
And make sure there are no other users logged in when you do it, this will reduce the clutter.

campher · 01-04-2010, 10:33 AM

jep i added the ps command into the profile file and started a new ssh session for an user account just created.
the output is the written file from this ps command running when the profile file is executed.

slide77 · 01-04-2010, 10:35 AM

I noticed this word in all that gibberish

Code:

´aÔwListenerÔÕ

Try searching for Listener on your system? Unfortunately, I just tried and there are a lot of legit linux files with that in their name.

samac · 01-04-2010, 11:47 AM

Quote:

Searching for this on google would suggest Visual Studio.

samac