The tag has no usage guidance.

learn more… | top users | synonyms (1)

3
votes
1answer
261 views

Tons of unknown connections in nethogs

I am seeing hundreds of different connections to the same ip and port scrolling by when running nethogs. Occasionally the foreign IP and port will change (not always 80, but sometimes). I've noticed ...
2
votes
1answer
462 views

A window asking me to enter my ssh passphrase is popping up randomly. Why?

I'm on Ubuntu 14.04. For a few weeks now a small window keeps popping up randomly, grabbing my keyboard and asking me to enter the passphrase for my ssh key. The Window's title says "OpenSSH", and it ...
1
vote
1answer
55 views

is my newly setup mail server on my laptop hacked?

I have just installed postfix on Arch Linux. I am following Arch wiki to set aliases to set following line in /etc/postfix/aliases root: edward after this I ran postalias /etc/postfix/aliases and ...
0
votes
1answer
21 views

Suspicious traffic in nethogs on fresh install

Earlier today google said that unusual traffic was emanating from my computer and gave me a captcha. I got curious and installed nethogs. Everything appears normal except for an unknown program ...
0
votes
1answer
60 views

replace long text string (script with MANY special characters). sed, awk, grep

My site was hacked / infected. I replaced the url of the malicious link, but other elements in the malicious script are still making my site get blocked. Without inserting a hundred or so "escapes", ...
-2
votes
1answer
46 views

ClamAV installation problem?

My USB has windows viruses in it. Before attaching it to device(windows installed), I want to delete these viruses but i have kali installed device also from which I want this action to be done. I got ...
2
votes
0answers
310 views

API Monitoring and Hooking

I am currently reading the "Malware Analyst's Cookbook and DVD". There is a chapter "Dynamic Analysis" and there are also some recipes about hooking and monitoring API calls of process but it is for ...
2
votes
0answers
666 views

How do I stop the “Green double-underlined links pop-up ads” adware in Chromium?

Summary: In the Chromium web browser (Debian), can you tell me how get rid of whatever is causing the behaviour called "Green Double-Underlined Links pop-up ads"? I'd like to stop the behaviour, not ...
1
vote
0answers
45 views

Is the reader's linux '/usr/bin/mkdir' file larger than 53504 bytes? Has the reader got a virus?

I installed Fedora 19, and immediately listed the /usr/bin directory and saved the listing to a file. 4 hours later I list it again and all the executables have grown in size by about 1668 bytes. ...
1
vote
0answers
132 views

What is the command erepc? Is this malware?

I noticed that my system was running slower than normal so I ran a top command. Hogging a ton of my CPU was a process called erepc that I can find no information on. PID USER PR NI VIRT ...
1
vote
0answers
518 views

maldet and possible false positives?

I have been using maldet for many months and it's worked fine up until now. As of about a week ago, it is detecting a mass {HEX}PHP.Bypassshell in nearly every PHP file. I even downloaded a clean copy ...
1
vote
0answers
255 views

How to enable on access scanning and the like in Debian Squeeze?

I am using Debian squeeze. I want to enable on access scanning and scanning of downloaded files and all options which are employed by a proprietary virus scanner for Windows on Linux. I am using ...
0
votes
0answers
24 views

Practical method to safely use a USB stick on daily basis for Linux

Which practical method exist for safely using a USB stick on a daily basis, for Linux-based systems (e.g. Ubuntu) ? With emphasis over the following: I'm well aware that nothing is 100% secure ...
0
votes
0answers
73 views

Can I remove “Linux/Ebury Operation Windigo” without wiping the entire drive?

I used chkrootkit, which told me that I had "Linux/Ebury Operation Windigo" installed, I doubled checked by running ssh -G which printed out usage, without "illegal option". I removed all ssh files ...
0
votes
0answers
41 views

Junk Material on root crontab

I am investigating unexpected restart issue on my Oracle Unbreakable 6.5 and found some unexpected results on crontab for root users. I know that these are junk entries that my be cause to reboot ...
0
votes
0answers
128 views

Errors when installing Maldet on an Fedora 20 system, have had these before

I just installed maldetect-1.4.2 on a system(Fedora 20) and it gives this error when installing: gzip: stdin: unexpected end of file tar: Child returned status 1 tar: Error is not ...
-1
votes
0answers
18 views

Detecting software spying on driver communications

Say I want to figure out if some malware currently is eavesdropping on the communications between my keyboard and the IO unit handling the keystrokes. Is there a way to tell if any processes are ...