PDA

View Full Version : [ubuntu] What is yuntu3?

fuwkej
May 31st, 2009, 03:27 AM
In my log, I keep seeing the following types of entries:

03:05:27 yuntu3: restart.
03:06:34 yuntu3: restart.

I googled yuntu3, and there was only one direct match for yuntu3, and it links to a site in Chinese, and google warns that "This site may harm your computer."

Is yuntu3 malicious? anyone?
whoop
May 31st, 2009, 03:53 PM
never heard of it...
is it a daemon running on your machine?
check in /etc/init.d

is it a process running? check top
fuwkej
May 31st, 2009, 05:55 PM
Nope, doesn't appear to be running. It pops up from time to time, but I'm not sure why.

No daemon named yuntu3 in /etc/init.d and no process running by that name either.
whoop
May 31st, 2009, 06:32 PM
Nope, doesn't appear to be running. It pops up from time to time, but I'm not sure why.

No daemon named yuntu3 in /etc/init.d and no process running by that name either.

sudo find / -name yuntu3
fuwkej
May 31st, 2009, 07:24 PM
no results
Agent ME
May 31st, 2009, 10:51 PM
sudo find / -name yuntu3
Try
sudo find / -iname "*yuntu*"
instead.
cariboo907
June 1st, 2009, 02:47 PM
Do you get a process id when you run:

ps ax | grep yuntu3
fuwkej
June 1st, 2009, 11:27 PM
No results with the find function

There is a process running, here is the results:

$ ps ax | grep yuntu3
9513 pts/0 R+ 0:00 grep yuntu3

Thanks for helping
brian_p
June 2nd, 2009, 08:42 AM
There is a process running, here is the results:

$ ps ax | grep yuntu3
9513 pts/0 R+ 0:00 grep yuntu3

That is an entry for the grep process.

My search for yuntu3 on Google gives eight hits. You are at the the top. The others appear to be of little interest. In which log did you find it mentioned? Is it still there? May we see the command you used to view it and all the information given?
fuwkej
June 3rd, 2009, 10:59 PM
A google search of "yuntu3" in quotes, prior to this thread, only showed the chinese link which google says is an attack site.

The entry appeared in conky, which reads /var/log/messages .

I opened the log file directly, and searched for yuntu and could not find any entries. I came across these:


May 31 03:05:27 desktop syslogd 1.5.0#5ubuntu3: restart.
May 31 03:06:34 desktop syslogd 1.5.0#5ubuntu3: restart.It looks like conky was cutting off the first part of those lines and adding a y.. i have no idea why. Thanks for the help, I just wish I would have checked that sooner.