[SOLVED]got something like virus , please help?

nahush · 2024-08-15 09:22:08

Hello to all , i am very hopeful that i will get my problem solved from here as always.i guess from lat two weeks after updating arch linux , after starting my laptop more than 40 instances of screenshooter were starting automatically. and all the system would slow down drastically.today after 3 restarts i removed the screenshooter package of xfce4. lets see if other application starts to take its place . also i use pikaur fro my aur updates.please let me know if you need any thing from my side for understanding .

Last edited by nahush (2024-09-21 12:39:25)

seth · 2024-08-15 09:28:23

Sounds like some recursive session start, most likely something in your bashrc (or other shell config or /etc/profile*)

nahush · 2024-08-15 10:18:00

hello seth thanks for replying.
as i read your post and started to write . i was not able to write anything,also not in my terminal or in any serach function like in google youtube.and i am getting failed attempt for screenshooter as well.i have restart my laptop for doing those things.i was not able to write click or select any options from file manager as well.

my bashrc

# ~/.bashrc
#

# If not running interactively, don't do anything
[[ $- != *i* ]] && return

alias ls='ls --color=auto'
PS1='[\u@\h \W]\$ '


#making system to use makeflgs "
#export PATH= "/usr/lib/ccache/bin:$PATH"
#export MAKEFLGS="-j9-l8"
. "$HOME/.cargo/env"

my /etc/profile

 /etc/profile

# Append "$1" to $PATH when not already in.
# This function API is accessible to scripts in /etc/profile.d
append_path () {
    case ":$PATH:" in
        *:"$1":*)
            ;;
        *)
            PATH="${PATH:+$PATH:}$1"
    esac
}

# Append our default paths
append_path '/usr/local/sbin'
append_path '/usr/local/bin'
append_path '/usr/bin'

# Force PATH to be environment
export PATH

as i usnderstand the problem starts when i start my update from terminal.lets see if this is true.

Last edited by nahush (2024-08-15 10:42:50)

seth · 2024-08-15 13:45:56

Nothing in those files is nearly prone to cause this - how do you start the session? Do you have a bash_profile (do you use bash as login shell at all)?
Are there no files in /etc/profile.d (the "*" is a glob)?

start my update from terminal

So this behavior doesn't immediately start when you log into an session?

Trilby · 2024-08-15 14:20:58

Also please post the output of each of the following:

grep -l xfce4-screenshooter ~/.*
grep -rl xfce4-screenshooter ~/.config

Any files listed could be a potential problem and should be checked / edited or posted here if you are unsure what to do with them.

EDIT: "problem" as there was mistake in editing some config file, not as in there is a virus. There is no virus (technically we can't be 100% should there isn't coincidentally some unrelated virus somewhere, but the symptoms you described are almost certainly not from a virus - aka there is no reason at all to even suspect a virus here).

Last edited by Trilby (2024-08-15 17:02:52)

WorMzy · 2024-08-15 16:19:51

Mod note: Moving to NC.

nahush · 2024-08-15 17:38:03

seth wrote:

Nothing in those files is nearly prone to cause this - how do you start the session? Do you have a bash_profile (do you use bash as login shell at all)?
Are there no files in /etc/profile.d (the "*" is a glob)?
start my update from terminal
So this behavior doesn't immediately start when you log into an session?

no i was mistaken it starts as my session starts.i was trying to check if this was the case.

my profile.d files

[musicarch@musicArch profile.d]$ ls
csound.sh       gawk.csh  jre.sh                 perlbin.csh
debuginfod.csh  gawk.sh   libreoffice-fresh.csh  perlbin.sh
debuginfod.sh   gpm.sh    libreoffice-fresh.sh   vte.csh
freetype2.sh    jre.csh   locale.sh              vte.sh

nahush · 2024-08-15 17:43:17

Trilby wrote:

Also please post the output of each of the following:
grep -l xfce4-screenshooter ~/.*
grep -rl xfce4-screenshooter ~/.config
Any files listed could be a potential problem and should be checked / edited or posted here if you are unsure what to do with them.
EDIT: "problem" as there was mistake in editing some config file, not as in there is a virus. There is no virus (technically we can't be 100% should there isn't coincidentally some unrelated virus somewhere, but the symptoms you described are almost certainly not from a virus - aka there is no reason at all to even suspect a virus here).

output of grep -l xfce4-screenshooter ~/.*

[musicarch@musicArch ~]$ grep -l xfce4-screenshooter ~/.*
grep: /home/musicarch/.alsamodular: Is a directory
grep: /home/musicarch/.android: Is a directory
/home/musicarch/.bash_history
grep: /home/musicarch/.bcast5: Is a directory
grep: /home/musicarch/.cache: Is a directory
grep: /home/musicarch/.cargo: Is a directory
grep: /home/musicarch/.ccache: Is a directory
grep: /home/musicarch/.cmake: Is a directory
grep: /home/musicarch/.config: Is a directory
grep: /home/musicarch/.crashlytics: Is a directory
grep: /home/musicarch/.fontconfig: Is a directory
grep: /home/musicarch/.fonts: Is a directory
grep: /home/musicarch/.gnupg: Is a directory
grep: /home/musicarch/.gradle: Is a directory
grep: /home/musicarch/.helm: Is a directory
grep: /home/musicarch/.helm-synth: Is a directory
grep: /home/musicarch/.Icons: Is a directory
grep: /home/musicarch/.java: Is a directory
grep: /home/musicarch/.jsampler: Is a directory
grep: /home/musicarch/.keras: Is a directory
grep: /home/musicarch/.kite: Is a directory
grep: /home/musicarch/.local: Is a directory
grep: /home/musicarch/.log: Is a directory
grep: /home/musicarch/.lv2: Is a directory
grep: /home/musicarch/.mozilla: Is a directory
grep: /home/musicarch/.npm: Is a directory
grep: /home/musicarch/.nv: Is a directory
grep: /home/musicarch/.pipewire-media-session: Is a directory
grep: /home/musicarch/.pki: Is a directory
grep: /home/musicarch/.pulse: Is a directory
grep: /home/musicarch/.rustup: Is a directory
grep: /home/musicarch/.solfege: Is a directory
grep: /home/musicarch/.ssh: Is a directory
grep: /home/musicarch/.sweep: Is a directory
grep: /home/musicarch/.themes: Is a directory
grep: /home/musicarch/.u-he: Is a directory
grep: /home/musicarch/.vim: Is a directory
grep: /home/musicarch/.vital: Is a directory
grep: /home/musicarch/.vitalium: Is a directory
grep: /home/musicarch/.vst: Is a directory
grep: /home/musicarch/.yarn: Is a directory
[musicarch@musicArch ~]$

output of grep -rl xfce4-screenshooter ~/.config

[musicarch@musicArch ~]$ grep -rl xfce4-screenshooter ~/.config
/home/musicarch/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-keyboard-shortcuts.xml
[musicarch@musicArch ~]$

Trilby · 2024-08-15 18:10:08

Thanks - nothing relevant in that grep output (other than GNU coreutils' grep's odd chattiness about directories). That search was not exhaustive of relevant "startup files" so others may still be relevant, but that checked off a lot of possible sources of the problem.

seth · 2024-08-15 19:47:46

nahush wrote:

no i was mistaken it starts as my session starts.i was trying to check if this was the case.

seth wrote:

how do you start the session?

grepping for xfce4-screenshooter might have been too close in case it' started via the /usr/share/xfce4/panel/plugins/screenshooter.desktop

nahush · 2024-08-18 15:58:50

i am updating right now to check if the problem still persists.will update accordingly. as i was busy i was not able to make any updates for 2 days.I will also try updating my AUR packages with pikaur will update what happens upon doing this both updates.
thanks all for making effort of helping me.

nahush · 2024-09-08 13:36:26

what i observed since my last post

1. the problem starts when i update my system with terminal.it doesnt matter if its a AUR update or a pacman update.

2.After sometime my keyboard and mouse odnt work at all , i cant shutdown my laptop with them as well i need to press the button directly.

3.if i dont update everything works fine till i update next for that session.

4. if i am watching any movie online it will get push forword and backword at leat one time.

5.my left arrow key is also not working properly.

as per my understanding every thing is related to

1.firefox, i will remove and reinstall it lets see if anything changes.

2. Clicks, which i am not aware hoe to change or improve it .

i removed some file from autostart directory which at least stopped print error to apear.

where and what i can change i am trying to find but as per my understanding i didn't saw anything mention like this .

waiting for your replies.

thanks

seth · 2024-09-08 13:41:29

https://bbs.archlinux.org/viewtopic.php … 1#p2194721
https://bbs.archlinux.org/viewtopic.php?id=299193

nahush · 2024-09-21 12:38:30

hello

Thank you for helping me and trying to solve my problem.i didnt do much of anything then to update and change from linux to linux-lts kernal.as far as i know the topic title problen is been solved .
Thank you.

Arch Linux

#1 2024-08-15 09:22:08

[SOLVED]got something like virus , please help?

#2 2024-08-15 09:28:23

Re: [SOLVED]got something like virus , please help?

#3 2024-08-15 10:18:00

Re: [SOLVED]got something like virus , please help?

#4 2024-08-15 13:45:56

Re: [SOLVED]got something like virus , please help?

#5 2024-08-15 14:20:58

Re: [SOLVED]got something like virus , please help?

#6 2024-08-15 16:19:51

Re: [SOLVED]got something like virus , please help?

#7 2024-08-15 17:38:03

Re: [SOLVED]got something like virus , please help?

#8 2024-08-15 17:43:17

Re: [SOLVED]got something like virus , please help?

#9 2024-08-15 18:10:08

Re: [SOLVED]got something like virus , please help?

#10 2024-08-15 19:47:46

Re: [SOLVED]got something like virus , please help?

#11 2024-08-18 15:58:50

Re: [SOLVED]got something like virus , please help?

#12 2024-09-08 13:36:26

Re: [SOLVED]got something like virus , please help?

#13 2024-09-08 13:41:29

Re: [SOLVED]got something like virus , please help?

#14 2024-09-21 12:38:30

Re: [SOLVED]got something like virus , please help?

Board footer