Results 1 to 5 of 5

Thread: i think I have a virus....

  1. #1
    Join Date
    Jul 2005
    Beans
    124

    i think I have a virus....

    I've noticed a lot of disk thrashing recently that I never had so a check of the forums suggested iotop would identify the the culprit -

    it did.

    Sendmail if running 2-3 times a second;

    sendmail: MTA: ./q############ from queue

    I'm assuming my box is compromised and I'm spewing spam.

    rkhunter / chkhunter suggest nothing obvious.

    How can I confirm what infection I have?

    Phil

  2. #2
    Join Date
    Nov 2012
    Location
    in the coffe shop
    Beans
    29
    Distro
    Ubuntu 12.10 Quantal Quetzal

    Re: i think I have a virus....

    i used ClamTK and that just checks that would be a place to start

  3. #3
    Join Date
    Dec 2009
    Location
    Fareham, UK
    Beans
    1,856
    Distro
    Ubuntu

    Re: i think I have a virus....

    Change the Email password, and log out of the email account. See if that stops it.

  4. #4
    Join Date
    Jul 2005
    Beans
    124

    Re: i think I have a virus....

    hmm,

    looking at the files in the /var/spool/mqueue they are all local - not spam.

    'MOperating system error' - being spewed out about 30 a minute.

    time for more investigating

  5. #5
    Join Date
    Jul 2005
    Beans
    124

    Re: i think I have a virus....

    Solved.

    a regular cron job was creating significant errors and emailing them. Output is now suppressed and the problem has gone away

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •