'J Random User' Account Appeared on list of users?
Hello everyone,
When I clicked on my Ubuntu power (start?) button on the top-right corner, a user account by the name of "J Random User" appeared on the list of users in-between the Guest account and my main account that I'm currently using. I restarted my computer and now the user account has disappeared. Should I be worried that my computer has been compromised by someone/something, or is there a logical explanation for this?
Edit: Just to clarify, I'm currently using Ubuntu 13.10.
Re: 'J Random User' Account Appeared on list of users?
Moved to Security Discussions.
Jonn Q. Public, J Random User and J Random Hacker are folks you don't want to see...
Re: 'J Random User' Account Appeared on list of users?
Have you got a remote desktop client, or desktop sharing enabled with a simple or no password?
Re: 'J Random User' Account Appeared on list of users?
I got today exactly same issue, I didn't rebooted system yet - only disconnected it from Internet. I have ssh server and TeamViewer on my computer, but ssh shouldn't be a issue as my laptop isn't visible from Internet.
Re: 'J Random User' Account Appeared on list of users?
But how many users is it visible to on your WiFi network?
Re: 'J Random User' Account Appeared on list of users?
I experienced exactly the same issue. I can confirm that the account disappeared after rebooting.
As a safety measure, I formatted my hard drive, reinstalled Ubuntu, and I am changing my passwords.
Is it possible that this is a bug, or was my system compromised? How could that have happened? How could this have been avoided?
Re: 'J Random User' Account Appeared on list of users?
Spotting a "J Random User" is why I ended up at this message, it seeming to be the only relevant thing Google has revealed.
I noticed "J.Random User" in the list when I went to logoff five minutes ago.
Re: 'J Random User' Account Appeared on list of users?
To all three ussrs that saw "J Random User" show up, please run these commands and post the results
and
Code:
sudo service --status-all
run them when you see the user account show up again and also right now.
Re: 'J Random User' Account Appeared on list of users?
Better yet just run this and post the output
Code:
grep *random* /var/log/auth.log | less
Re: 'J Random User' Account Appeared on list of users?
Same here. New installation of Ubuntu 13.10.
Installed skype, emacs, vlc, clementin, vbox (and windows 8 in it), xchat, wireshark, htop, qbittorent, dropbox.
Quote:
<my-username>@metropolis:~$ sudo grep *random* /var/log/auth.log
Nov 25 22:09:23 metropolis sudo: <my-username> : TTY=pts/0 ; PWD=/home/<my-username> ; USER=root ; COMMAND=/bin/grep *random* /var/log/auth.log
Quote:
<my-username>@metropolis:~$ w
22:13:45 up 1:08, 2 users, load average: 0,12, 0,24, 0,61
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
<my-username> tty7 :0 21:06 1:07m 4:07 0.15s init --user
<my-username> pts/0 :0 22:04 1.00s 0.19s 0.00s w
Quote:
<my-username>@metropolis:~$ sudo service --status-all
[ + ] acpid
[ + ] anacron
[ + ] apparmor
[ ? ] apport
[ + ] avahi-daemon
[ + ] bluetooth
[ - ] brltty
[ + ] console-font
[ + ] console-setup
[ + ] cron
[ + ] cups
[ + ] cups-browsed
[ - ] dbus
[ ? ] dns-clean
[ + ] friendly-recovery
[ - ] grub-common
[ ? ] irqbalance
[ - ] kerneloops
[ ? ] killprocs
[ + ] kmod
[ ? ] lightdm
[ ? ] networking
[ ? ] ondemand
[ - ] openvpn
[ ? ] pppd-dns
[ - ] procps
[ - ] pulseaudio
[ ? ] rc.local
[ + ] resolvconf
[ + ] rfkill-restore
[ + ] rfkill-store
[ - ] rsync
[ + ] rsyslog
[ + ] saned
[ ? ] sendsigs
[ + ] setvtrgb
[ ? ] speech-dispatcher
[ - ] sudo
[ + ] udev
[ ? ] umountfs
[ ? ] umountnfs.sh
[ ? ] umountroot
[ - ] unattended-upgrades
[ - ] urandom
[ ? ] vboxautostart-service
[ + ] vboxballoonctrl-service
[ + ] vboxdrv
[ + ] vboxweb-service
[ - ] x11-common