a strange software was installed on my system [solved]

[nabe_33]

this software suddenly appeared installed on my system and I did not install it,
I recently installed the Xplayer player from the software manager, but I haven't installed or updated or downloaded anything else today so I have no idea how that got on my system,
at the moment it let me remove it normally using sudo apt purge gromit however I am worried about a virus or even the stability of the system.
I'm going to uninstall Xplayer as well just in case, I only wanted it as a secondary player anyway, I don't know if I inadvertently installed it while looking in the software manager, but I see that as unlikely.
this software suddenly appeared installed on my system and I did not install it,
I recently installed the Xplayer player from the software manager, but I haven't installed or updated or downloaded anything else today so I have no idea how that got on my system,
at the moment it let me remove it normally using sudo apt purge gromit however I am worried about a virus or even the stability of the system.
I'm going to uninstall Xplayer as well just in case, I only wanted it as a secondary player anyway, I don't know if I inadvertently installed it while looking in the software manager, but I see that as unlikely.
so far my system is working fine and I have not encountered any other strange software or any other new problems.
does anyone have an idea what could have happened here?

Code: Select all

inxi -Fxxxrz
System:    Kernel: 5.4.0-121-generic x86_64 bits: 64 compiler: gcc v: 9.4.0 Desktop: Xfce 4.16.0 tk: Gtk 3.24.20 
           info: xfce4-panel wm: xfwm4 dm: LightDM 1.30.0 Distro: Linux Mint 20.3 Una base: Ubuntu 20.04 focal 
Machine:   Type: Desktop Mobo: Intel model: DG31PR v: AAD97573-304 serial: <filter> BIOS: Intel 
           v: PRG3110H.86A.0052.2008.0612.1910 date: 06/12/2008 
CPU:       Topology: Dual Core model: Pentium E6600 bits: 64 type: MCP arch: Penryn rev: A L2 cache: 2048 KiB 
           flags: lm nx pae sse sse2 sse3 ssse3 bogomips: 9199 
           Speed: 1240 MHz min/max: N/A Core speeds (MHz): 1: 1240 2: 1244 
Graphics:  Device-1: Intel 82G33/G31 Express Integrated Graphics driver: i915 v: kernel bus ID: 00:02.0 chip ID: 8086:29c2 
           Display: x11 server: X.Org 1.20.13 driver: intel unloaded: fbdev,modesetting,vesa compositor: compton 
           v: 0.1~beta2+20150922 tty: N/A 
           OpenGL: renderer: Mesa DRI Intel G33 v: 1.4 Mesa 21.2.6 direct render: Yes 
Audio:     Device-1: Intel NM10/ICH7 Family High Definition Audio driver: snd_hda_intel v: kernel bus ID: 00:1b.0 
           chip ID: 8086:27d8 
           Sound Server: ALSA v: k5.4.0-121-generic 
Network:   Device-1: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet vendor: Intel driver: r8169 v: kernel 
           port: d000 bus ID: 03:00.0 chip ID: 10ec:8168 
           IF: ens2 state: up speed: 100 Mbps duplex: full mac: <filter> 
Drives:    Local Storage: total: 1.90 TiB used: 1.88 TiB (98.7%) 
           ID-1: /dev/sda vendor: Western Digital model: WD2003FYPS-27Y2B0 size: 1.82 TiB speed: <unknown> 
           rotation: 5400 rpm serial: <filter> rev: 5G11 temp: 40 C scheme: MBR 
           ID-2: /dev/sdb vendor: Seagate model: ST380815AS size: 74.53 GiB speed: <unknown> serial: <filter> rev: B 
           temp: 41 C scheme: MBR 
           ID-3: /dev/sdc type: USB vendor: Kingston model: DataTraveler 3.0 size: 7.20 GiB serial: <filter> scheme: MBR 
Partition: ID-1: / size: 70.70 GiB used: 33.83 GiB (47.8%) fs: ext4 dev: /dev/dm-1 
           ID-2: /boot size: 703.5 MiB used: 315.1 MiB (44.8%) fs: ext4 dev: /dev/sdb5 
           ID-3: swap-1 size: 980.0 MiB used: 314.3 MiB (32.1%) fs: swap dev: /dev/dm-2 
Sensors:   System Temperatures: cpu: 45.0 C mobo: 43.0 C 
           Fan Speeds (RPM): cpu: 0 fan-2: 1308 fan-3: 0 fan-4: 0 fan-5: 0 
           Voltages: 12v: N/A 5v: N/A 3.3v: 3.33 vbat: 3.14 
Repos:     No active apt repos in: /etc/apt/sources.list 
           Active apt repos in: /etc/apt/sources.list.d/additional-repositories.list 
           1: deb https://ppa.launchpadcontent.net/christian-boxdoerfer/fsearch-stable/ubuntu focal main
           Active apt repos in: /etc/apt/sources.list.d/christian-boxdoerfer-fsearch-stable-focal.list 
           1: deb http://ppa.launchpad.net/christian-boxdoerfer/fsearch-stable/ubuntu focal main
           2: deb-src http://ppa.launchpad.net/christian-boxdoerfer/fsearch-stable/ubuntu focal main
           Active apt repos in: /etc/apt/sources.list.d/megasync.list 
           1: deb [signed-by=/usr/share/keyrings/meganz-archive-keyring.gpg] https://mega.nz/linux/repo/xUbuntu_20.04/ ./
           Active apt repos in: /etc/apt/sources.list.d/official-package-repositories.list 
           1: deb http://packages.linuxmint.com una main upstream import backport
           2: deb http://archive.ubuntu.com/ubuntu focal main restricted universe multiverse
           3: deb http://archive.ubuntu.com/ubuntu focal-updates main restricted universe multiverse
           4: deb http://archive.ubuntu.com/ubuntu focal-backports main restricted universe multiverse
           5: deb http://security.ubuntu.com/ubuntu/ focal-security main restricted universe multiverse
           6: deb http://archive.canonical.com/ubuntu/ focal partner
           Active apt repos in: /etc/apt/sources.list.d/official-source-repositories.list 
           1: deb-src http://packages.linuxmint.com una main upstream import backport
           2: deb-src http://archive.ubuntu.com/ubuntu focal main restricted universe multiverse
           3: deb-src http://archive.ubuntu.com/ubuntu focal-updates main restricted universe multiverse
           4: deb-src http://archive.ubuntu.com/ubuntu focal-backports main restricted universe multiverse
           5: deb-src http://security.ubuntu.com/ubuntu/ focal-security main restricted universe multiverse
           6: deb-src http://archive.canonical.com/ubuntu/ focal partner
           Active apt repos in: /etc/apt/sources.list.d/protonvpn-stable.list 
           1: deb [signed-by=/usr/share/keyrings/protonvpn-stable-archive-keyring.gpg] https://repo.protonvpn.com/debian stable main
           Active apt repos in: /etc/apt/sources.list.d/syncthing.list 
           1: deb [signed-by=/usr/share/keyrings/syncthing-archive-keyring.gpg] https://apt.syncthing.net/ syncthing stable
           Active apt repos in: /etc/apt/sources.list.d/winehq-focal.sources 
           1: deb [arch=amd64 i386] https://dl.winehq.org/wine-builds/ubuntu focal main
Info:      Processes: 203 Uptime: 1d 5h 39m Memory: 1.92 GiB used: 1.15 GiB (59.9%) Init: systemd v: 245 runlevel: 5 
           Compilers: gcc: 9.4.0 alt: 9 Shell: bash v: 5.0.17 running in: xfce4-terminal inxi: 3.0.38 

[sleeper12]

Just a guess, but maybe Gromit installs along with xplayer/xplayer-plugins?

Edit: Found this:

"xplayer-plugins - Plugins for the Xplayer media player

Xplayer is a simple yet featureful media player which can read a large number of file formats.
This package contains a set of recommended plugins for Xplayer, which allow to:

Annotate the screen with the Gromit tool...."

[smurphos]

Run in a terminal to confirm

Code: Select all

aptitude why gromit

But the answer above is likely on the ball

Code: Select all

steve@steve-Inspiron-5580:~$ apt rdepends gromit
gromit
Reverse Depends:
  xplayer-plugins
  xplayer-plugins-extra

[Cosmo.]

Another option:

Open Synaptic -> menu -> file menu -> history and enter gromit and press the enter key. It will show you, when it got installed, possibly together with some other packages.

[nabe_33]

Run in a terminal to confirm

Code: Select all

aptitude why gromit

But the answer above is likely on the ball

Code: Select all

steve@steve-Inspiron-5580:~$ apt rdepends gromit
gromit
Reverse Depends:
  xplayer-plugins
  xplayer-plugins-extra

Code: Select all

apt rdepends gromit
gromit
Reverse Depends:
  xplayer-plugins
  xplayer-plugins-extra

I got the same result, does this mean then that it is a dependency of xplayer-plugins or something similar?
so I guess I shouldn't worry about it right?

Another option:

Open Synaptic -> menu -> file menu -> history and enter gromit and press the enter key. It will show you, when it got installed, possibly together with some other packages.

I didn't find that but when I search for gromit in synaptic it shows me Xplayer-plugins as results and it says:

Code: Select all

This package contains a set of extra plugins for Xplayer, which allow to:

   * Discover and browse media using the Grilo DLNA plugin
   * Annotate the screen with the Gromit tool

so it seems that it was this plugin that installed it.

Anyway I uninstalled the player completely and installed Celluloid which was the native player so I will start using that as a secondary player.

[nabe_33]

Just a guess, but maybe Gromit installs along with xplayer/xplayer-plugins?

Edit: Found this:

"xplayer-plugins - Plugins for the Xplayer media player

Xplayer is a simple yet featureful media player which can read a large number of file formats.
This package contains a set of recommended plugins for Xplayer, which allow to:

Annotate the screen with the Gromit tool...."

oh, sorry i had skipped your reply
yes I was able to find it on my own too, thanks for the replies