.ssh and .gnupg

[mcyber4]

Hi
what apps create the .ssh and .gnupg folders in your home directory? Is that normal?
Thanks

[The Cog]

.ssh is created whenever you use your ssh client ssh to connect to another machine - it contains a list of known hosts so that it can recognise and warn you if a host you connect to again has changed (possibly being impersonated). ssh-keygen generates key files that you can use for making password-less connections to other servers. You can also create a file authorized_keys that contains a list of public keys that other computers can use to log into your accound without a password.

I am less familiar with .gnupg, but I believe it is associated with the file engryption utility gpg

[mcyber4]

Thanks. So as I didn't use ssh or gnupg myself some script tries such on my pc? Hacked?

[The Cog]

Can't be sure. What files are in .ssh?

[jdeca57]

On my laptop with a reasonably fresh install of 18,04 there is a .ssh but it's empty and there is a .gnupg dating from the installation so both hidden files aren't an indication that anything went wrong.

[mcyber4]

Also /etc/cups has a ssh folder and subscriptions.conf are updated as root every login.
And found .wget-hsts file without ever using wget.
Still all is fine? Thanks.

[mcyber4]

reinstalled Ubuntu 18.10 only to find now in ~.pki folder. What is that? Thanks

[corradoventu]

my .gnupg contains only an empty directory

corrado@corrado-p6-dd-1227:~$ ls .gnupg -al -R
.gnupg:
total 12
drwx------  3 corrado corrado 4096 dic 27 13:27 .
drwxr-xr-x 17 corrado corrado 4096 dic 30 14:25 ..
drwx------  2 corrado corrado 4096 dic 27 13:27 private-keys-v1.d

.gnupg/private-keys-v1.d:
total 8
drwx------ 2 corrado corrado 4096 dic 27 13:27 .
drwx------ 3 corrado corrado 4096 dic 27 13:27 ..
corrado@corrado-p6-dd-1227:~$

[mcyber4]

Yes but .pki and

.wget-hsts

are not normal. Where could the trojan be hiding in 18.10 as I've reinstalled that? Maybe 18.10 network code is infected…

[mcyber4]

on my fresh 18.10 install in my .gnupg I have also a pubring.kbx and a trustd.gpg