Re: [LUG] viruses and protecting against them

["M. J. Everitt" <m.j.everitt@xxxxxxx>]

On 14/11/18 08:14, Pentiddy wrote:

Hi all,
still seem to be having a few issues, and wondered if you might be able to comment on the following entries in the syslog...

whoopsie[1317]: [06:38:06] Cannot reach: https://daisy.ubuntu.com
nm-dispatcher: req:2 'down' [enp58s0f1]: new request (2 scripts)
nm-dispatcher: req:2 'down' [enp58s0f1]: start running ordered scripts...

 kernel: [13599.181267] wlp59s0: deauthenticating from 00:17:3f:17:ea:21 by local choice (Reason: 3=DEAUTH_LEAVING)

and this from the session I just started...

Nov 14 07:37:37 pentiddy-UltraNoteIV-15 dbus-daemon[1459]: [session uid=1000 pid=1459] Activating service name='org.freedesktop.thumbnails.Thumbnailer1' requested by ':1.18' (uid=1000 pid=1569 comm="Thunar --daemon " label="unconfined")
Nov 14 07:37:38 pentiddy-UltraNoteIV-15 org.freedesktop.thumbnails.Thumbnailer1[1459]: Registered thumbailer /usr/bin/gdk-pixbuf-thumbnailer -s %s %u %o
Nov 14 07:37:38 pentiddy-UltraNoteIV-15 org.freedesktop.thumbnails.Thumbnailer1[1459]: Registered thumbailer /usr/bin/gdk-pixbuf-thumbnailer -s %s %u %o
Nov 14 07:37:38 pentiddy-UltraNoteIV-15 org.freedesktop.thumbnails.Thumbnailer1[1459]: Registered thumbailer atril-thumbnailer -s %s %u %o
Nov 14 07:37:38 pentiddy-UltraNoteIV-15 org.freedesktop.thumbnails.Thumbnailer1[1459]: Registered thumbailer gnome-thumbnail-font --size %s %u %o
Nov 14 07:37:38 pentiddy-UltraNoteIV-15 dbus-daemon[1459]: [session uid=1000 pid=1459] Successfully activated service 'org.freedesktop.thumbnails.Thumbnailer1'
Nov 14 07:37:46 pentiddy-UltraNoteIV-15 CRON[881]: (root) CMD ([ -x /etc/init.d/anacron ] && if [ ! -d /run/systemd/system ]; then /usr/sbin/invoke-rc.d anacron start >/dev/null; fi)
Nov 14 07:37:50 pentiddy-UltraNoteIV-15 gvfsd-metadata[4274]: g_udev_device_has_property: assertion 'G_UDEV_IS_DEVICE (device)' failed

Some of these entries are possible problems maybe?
Don't like the look of the root command above- I have not set any CRON jobs...

If these are suspicious and therefore my system is still compromised after a re-install, the infection must be somewhere in the files I backed up.
I'm assuming most would now say head to windows for visrus scanning as Mr Meowski has suggested...

Thanks all,

Anthony

---

	Pentiddy Woods / Pentiddy Woods newsletter	Attached files are likely to be open-document format (*.odt or *.ods). Why? So as not to depend on one company for accessing my own data in future. See:  https://www.documentliberation.org/ MS-Word may say 'damaged file' to discourage this but should open the attachment(s) anyway.
	Pentiddy Natural Burials
	Heartwood Creations
	Pentiddy Community Woodland

---

The day I see a virus that's effective on linux .. I'll eat my hat ...

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
The Mailing List for the Devon & Cornwall LUG
https://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq