View Full Version : [all variants] Am I compromised?
jasongreen
August 5th, 2008, 10:42 PM
I've had something very unnerving happen a couple of times now. My computer will start running very slowly. I kill X with Ctl-ALT-BKSP and then select restart once I hit gdm. Then I briefly see another login screen (blue w/ a sunflower in the lower left hand corner) before the shutdown proceeds. Any idea what this could be? I'm behind a router w/ NAT and no ports forwarded and am not using the default password on the router.
How worried should I be?
What should I do next?
Thanks
Jordanwb
August 5th, 2008, 10:43 PM
Do you mean by running slowly that it takes a will to respond or is there a lot of hard drive activity?
jasongreen
August 5th, 2008, 10:51 PM
Yes
pedja_portugalac
August 5th, 2008, 10:56 PM
My strategy is to reinstall every time I doubt my security was compromised. I store everything on external HD and that's why it gets me 30 minutes to reinstall, 45 with an encrypted LVM. Are you using kubuntu or ubuntu (KDE or GNOME)? I use GNOME and I'd never seen some blue flower in the corners nor the KDE have it, in my experience? Maybe you have installed packages from GNOME Arts or some other site to make your desktop looking nicer, login managers and staff? If that's the case, maybe it is reason why your PC is slow and conflictuous?
Jordanwb
August 5th, 2008, 11:06 PM
Yes
OMG. Which? :)
My strategy is to reinstall every time I doubt my security was compromised. I store everything on external HD and that's why it gets me 30 minutes to reinstall, 45 with an encrypted LVM. Are you using kubuntu or ubuntu (KDE or GNOME)? I use GNOME and I'd never seen some blue flower in the corners nor the KDE have it, in my experience? Maybe you have installed packages from GNOME Arts or some other site to make your desktop looking nicer, login managers and staff? If that's the case, maybe it is reason why your PC is slow and conflictuous?
Posting your computer specs is always useful.
On an unrelated note: it's 11PM here. Time to go to sleep. Good night.
jasongreen
August 5th, 2008, 11:16 PM
Both.
pedja_portugalac
August 5th, 2008, 11:28 PM
OMG. Which? :)
Posting your computer specs is always useful.
Didn't pay attention to second address mention, it was hidden between words which were copy - pasted, and then? I just try to help solving problem. Forget...
jasongreen
August 5th, 2008, 11:30 PM
AMD 2800+ (1,8 GHZ) running 7.10 Primarily GNOME but have other desktop environments installed.
SunnyRabbiera
August 5th, 2008, 11:32 PM
are you sure its just your OS?
Check your actual computer, make sure she is running clean and such?
jasongreen
August 5th, 2008, 11:33 PM
I guess I'm a bit unsure as to how to do that. I don't see anything odd when I do a last. Where else should I look?
pedja_portugalac
August 5th, 2008, 11:37 PM
Primarily GNOME but have other desktop environments installed.
There's a problem, I knew that.
jasongreen
August 5th, 2008, 11:37 PM
Looking at /var/log/messages I see out of memory errors when I had my issue.
pedja_portugalac
August 5th, 2008, 11:45 PM
Before your problems began did you install some additional login manager, screen saver etc?
If yes, open your synaptic package manager: >System > Administration > synaptic package manager and then in that window open History in the File tab. You'll find there history of all installed packages on your system (less those which we install from source). Browse them and completely remove all those who were installed after the date you've noticed beginning of your trouble. This could be one way to solve your problem. Else, I can see your PC is enough powerful to run the latest release of Ubuntu which is 8.04.1 and is Long Term Supported. I strongly encourage you to get one copy of it and reinstall your system.
Tylazene
August 5th, 2008, 11:54 PM
I think one of the default login screens has a sunflower on it. Could be just logging out to that screen and then shutting down.
jasongreen
August 5th, 2008, 11:55 PM
I don't think so.
16777216
August 5th, 2008, 11:56 PM
I am not sure what is causing your slowdown problem but the flower thing is one of the default GDM themes.
Perhaps a look at your processes to familiarize yourself with is normally running then when you get the slow down issue look again to see if any thing odd is running.
If you have not already open gnome-system-monitor and click edit > preferences and activate all information fields.
And in the view menu check all processes.
jasongreen
August 6th, 2008, 12:02 AM
I'll try that. It sounds at least possible that the memory thrash caused something with the login manager.
pedja_portugalac
August 6th, 2008, 12:11 AM
Before your problems began did you install some additional login manager, screen saver etc?
If yes, open your synaptic package manager: >System > Administration > synaptic package manager and then in that window open History in the File tab. You'll find there history of all installed packages on your system (less those which we install from source). Browse them and completely remove all those who were installed after the date you've noticed beginning of your trouble. This could be one way to solve your problem. Else, I can see your PC is enough powerful to run the latest release of Ubuntu which is 8.04.1 and is Long Term Supported. I strongly encourage you to get one copy of it and reinstall your system.
Jordanwb
August 6th, 2008, 08:51 AM
Didn't pay attention to second address mention, it was hidden between words which were copy - pasted, and then? I just try to help solving problem. Forget...
Huh?
I can see your PC is enough powerful to run the latest release of Ubuntu which is 8.04.1 and is Long Term Supported. I strongly encourage you to get one copy of it and reinstall your system.
Yeah 7.10 wouldn't boot on my Laptop most of the time, installed 8.04; worked like a charm.
How much physical memory and swap do you have?
jasongreen
August 6th, 2008, 11:31 AM
512 MB of physical RAM and 1 GB of swap. Yes, I know I need more :)
Jordanwb
August 6th, 2008, 11:57 AM
No that's a good amount
vBulletin® v3.8.4, Copyright ©2000-2012, Jelsoft Enterprises Ltd.