Run this secret update action and great things will happen

Questions about applications and software
Forum rules
Before you post please read this

Run this secret update action and great things will happen

Postby Redsandro on Wed Jan 16, 2013 10:45 am

Every few days I get a strange request to run a certain action.
I would have to enter my password for that, and the dialog doesn't even sound like common password dialogs, so I don't trust this at all.

Is there a way I can see what it is actually trying to do? Can I see with my own eyes? It's hard to judge with the information provided alone.

ScreenshotMint01.png
ScreenshotMint01.png (14.31 KiB) Viewed 378 times


ScreenshotMint02.png
ScreenshotMint02.png (7.95 KiB) Viewed 378 times
Redsandro
Level 3
Level 3
 
Posts: 105
Joined: Sun Jul 17, 2011 6:40 pm

Linux Mint is funded by ads and donations.
 

Re: Run this secret update action and great things will happ

Postby bigj231 on Wed Jan 16, 2013 11:43 am

Is it automatic, or do you have to initiate it? If it's automatic, stay far away. I have no idea what it could be. Obviously, someone's trying to get your password. Could be malicious, it could be genuine. Did you install anything recently?

You could look in the output of the 'top' utility and see what programs are running when that opens. Then start killing the ones you aren't sure about until that window closes. Let us know what you find. you might also try installing
Running on a 4-slot toaster @ 60Hz
User avatar
bigj231
Level 5
Level 5
 
Posts: 793
Joined: Fri Feb 26, 2010 10:16 am
Location: Middle of Nowhere

Re: Run this secret update action and great things will happ

Postby Redsandro on Wed Jan 16, 2013 12:24 pm

It comes automatically after booting every once in a while.

I don't see anything suspicious in top, and I install packages every now and then, but (almost) always from the default repo's.

You didn't finish your post though,
you might also try installing
try installing what?
I have ClamAV but haven't detected any virusses.
Redsandro
Level 3
Level 3
 
Posts: 105
Joined: Sun Jul 17, 2011 6:40 pm

Re: Run this secret update action and great things will happ

Postby zerozero on Wed Jan 16, 2013 2:05 pm

i never saw any legitimate pkg/action asking for passphrase
can you (as accurately as possible) list those packages (and by packages i mean everything that you installed in the system) that you installed from outside the default repo?

you can also try rkhunter (it's on the repos)
see the documentation https://help.ubuntu.com/community/RKhunter
zerozero
Level 16
Level 16
 
Posts: 6472
Joined: Tue Jul 07, 2009 2:29 pm

Re: Run this secret update action and great things will happ

Postby garolou on Wed Jan 16, 2013 5:24 pm

A 'passphrase' is not the same as the 'password' that you are probably asked for on a regular basis. I know of passphrase in one area only... Passphrases are optionaly set when creating keys. I'm no expert in this area, but have come across it when setting up public/private rsa key pairs for communicating without password to other computers on my network.
With the questionable terminal running, launch 'system monitor' and under the Processes tab look for a terminal icon probably identified as bash. Run your cursor over that line and a small popup should identify which application is running that terminal.
Hope this will give you some clues.
100% Linux: Mint 13 (cinnamon) laptop / Ubuntu 10.04 desktop / Ubuntu 10.04 server
garolou
Level 1
Level 1
 
Posts: 6
Joined: Fri Jan 11, 2013 12:39 am

Re: Run this secret update action and great things will happ

Postby thegreatgazoo on Thu Jan 17, 2013 12:23 pm

Is this a fresh installation and did you encrypt your home directory?

This dialog shows up usually on your first boot asking you to create a paraphrase. You need this in case you forget your password.

Once you put in your password, it gives you a paraphrase that you need to save somewhere.

I haven't seem this at all in mate, and I do encrypt my home directory. I used to see our all the time on Ubuntu, but it has a description of what it was doing (not null)

Sent from my Nexus 4 using Tapatalk 2
thegreatgazoo
Level 3
Level 3
 
Posts: 109
Joined: Wed Aug 22, 2012 3:18 pm

Re: Run this secret update action and great things will happ

Postby Redsandro on Thu Jan 17, 2013 2:46 pm

Yes, yes it's similar to that. However, I already have the key written down, so maybe I already had that dialog.

Either way, it's not supposed to say 'null'. I'm not gonna try this before I know what this is. Could be you're totally right and there's a little glitch causing the same dialog to appear without a description. But could just as well be a phishing attemt for my password.
Redsandro
Level 3
Level 3
 
Posts: 105
Joined: Sun Jul 17, 2011 6:40 pm

Linux Mint is funded by ads and donations.
 

Return to Software & Applications

Who is online

Users browsing this forum: No registered users and 29 guests