I am trying to find out if someone is running a server on my Ubuntu without my knowledge











up vote
0
down vote

favorite












I know this sounds a bit odd. But I have been having hacking done on my computer and I am locked out of my "su" user now for some reason. My computer cpu is running abnormally high and I think there may be a server placed on my computer..call me paranoid. How can I tell if there is any server or high usage program put on my computer. I am a newbie in ubuntu so thanks for your understanding. :)



Ps I ran netstat as suggested in an ubuntu post..cant make heads or tails of it..






server netstat hacking







share|improve this question


















  • 2




    If you think someone else has your root password, then delete everything and reinstall now.
    – terdon♦
    Nov 29 at 13:30






  • 1




    What do you mean by "I have been having hacking done on my computer?" If you are wondering if your system has been compromised, then now is the WRONG time to try to learn the skills. Follow @terdon's advice right now.
    – user535733
    Nov 29 at 13:39















up vote
0
down vote

favorite












I know this sounds a bit odd. But I have been having hacking done on my computer and I am locked out of my "su" user now for some reason. My computer cpu is running abnormally high and I think there may be a server placed on my computer..call me paranoid. How can I tell if there is any server or high usage program put on my computer. I am a newbie in ubuntu so thanks for your understanding. :)



Ps I ran netstat as suggested in an ubuntu post..cant make heads or tails of it..






server netstat hacking







share|improve this question


















  • 2




    If you think someone else has your root password, then delete everything and reinstall now.
    – terdon♦
    Nov 29 at 13:30






  • 1




    What do you mean by "I have been having hacking done on my computer?" If you are wondering if your system has been compromised, then now is the WRONG time to try to learn the skills. Follow @terdon's advice right now.
    – user535733
    Nov 29 at 13:39













up vote
0
down vote

favorite









up vote
0
down vote

favorite











I know this sounds a bit odd. But I have been having hacking done on my computer and I am locked out of my "su" user now for some reason. My computer cpu is running abnormally high and I think there may be a server placed on my computer..call me paranoid. How can I tell if there is any server or high usage program put on my computer. I am a newbie in ubuntu so thanks for your understanding. :)



Ps I ran netstat as suggested in an ubuntu post..cant make heads or tails of it..






server netstat hacking







share|improve this question













I know this sounds a bit odd. But I have been having hacking done on my computer and I am locked out of my "su" user now for some reason. My computer cpu is running abnormally high and I think there may be a server placed on my computer..call me paranoid. How can I tell if there is any server or high usage program put on my computer. I am a newbie in ubuntu so thanks for your understanding. :)



Ps I ran netstat as suggested in an ubuntu post..cant make heads or tails of it..






server netstat hacking




server netstat hacking






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Nov 29 at 13:01









JayCouture.com

158119




158119








  • 2




    If you think someone else has your root password, then delete everything and reinstall now.
    – terdon♦
    Nov 29 at 13:30






  • 1




    What do you mean by "I have been having hacking done on my computer?" If you are wondering if your system has been compromised, then now is the WRONG time to try to learn the skills. Follow @terdon's advice right now.
    – user535733
    Nov 29 at 13:39














  • 2




    If you think someone else has your root password, then delete everything and reinstall now.
    – terdon♦
    Nov 29 at 13:30






  • 1




    What do you mean by "I have been having hacking done on my computer?" If you are wondering if your system has been compromised, then now is the WRONG time to try to learn the skills. Follow @terdon's advice right now.
    – user535733
    Nov 29 at 13:39








2




2




If you think someone else has your root password, then delete everything and reinstall now.
– terdon♦
Nov 29 at 13:30




If you think someone else has your root password, then delete everything and reinstall now.
– terdon♦
Nov 29 at 13:30




1




1




What do you mean by "I have been having hacking done on my computer?" If you are wondering if your system has been compromised, then now is the WRONG time to try to learn the skills. Follow @terdon's advice right now.
– user535733
Nov 29 at 13:39




What do you mean by "I have been having hacking done on my computer?" If you are wondering if your system has been compromised, then now is the WRONG time to try to learn the skills. Follow @terdon's advice right now.
– user535733
Nov 29 at 13:39










2 Answers
2






active

oldest

votes

















up vote
4
down vote













top should allow you to see processes currently running and you can order them by cpu / memory usage.




  • run top


  • press z and then x to see current sort column highlighted


  • press > to navigate to CPU column



now you have processes ordered by CPU usage, see if there's anything suspicious






share|improve this answer






























    up vote
    1
    down vote













    If you believe that your system has been compromised:




    1. Take it offline RIGHT NOW.

    2. If you are a skilled user, and wish to conduct a detailed forensic investigation at leisure, then clone the drive.

    3. Do a clean-install of Ubuntu. Format the disk - delete everything and start fresh.

    4. Restore your data from backups taken before the suspected intrusion occurred.






    share|improve this answer





















      Your Answer








      StackExchange.ready(function() {
      var channelOptions = {
      tags: "".split(" "),
      id: "89"
      };
      initTagRenderer("".split(" "), "".split(" "), channelOptions);

      StackExchange.using("externalEditor", function() {
      // Have to fire editor after snippets, if snippets enabled
      if (StackExchange.settings.snippets.snippetsEnabled) {
      StackExchange.using("snippets", function() {
      createEditor();
      });
      }
      else {
      createEditor();
      }
      });

      function createEditor() {
      StackExchange.prepareEditor({
      heartbeatType: 'answer',
      convertImagesToLinks: true,
      noModals: true,
      showLowRepImageUploadWarning: true,
      reputationToPostImages: 10,
      bindNavPrevention: true,
      postfix: "",
      imageUploader: {
      brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
      contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
      allowUrls: true
      },
      onDemand: true,
      discardSelector: ".discard-answer"
      ,immediatelyShowMarkdownHelp:true
      });


      }
      });














      draft saved

      draft discarded


















      StackExchange.ready(
      function () {
      StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1097115%2fi-am-trying-to-find-out-if-someone-is-running-a-server-on-my-ubuntu-without-my-k%23new-answer', 'question_page');
      }
      );

      Post as a guest















      Required, but never shown

























      2 Answers
      2






      active

      oldest

      votes








      2 Answers
      2






      active

      oldest

      votes









      active

      oldest

      votes






      active

      oldest

      votes








      up vote
      4
      down vote













      top should allow you to see processes currently running and you can order them by cpu / memory usage.




      • run top


      • press z and then x to see current sort column highlighted


      • press > to navigate to CPU column



      now you have processes ordered by CPU usage, see if there's anything suspicious






      share|improve this answer



























        up vote
        4
        down vote













        top should allow you to see processes currently running and you can order them by cpu / memory usage.




        • run top


        • press z and then x to see current sort column highlighted


        • press > to navigate to CPU column



        now you have processes ordered by CPU usage, see if there's anything suspicious






        share|improve this answer

























          up vote
          4
          down vote










          up vote
          4
          down vote









          top should allow you to see processes currently running and you can order them by cpu / memory usage.




          • run top


          • press z and then x to see current sort column highlighted


          • press > to navigate to CPU column



          now you have processes ordered by CPU usage, see if there's anything suspicious






          share|improve this answer














          top should allow you to see processes currently running and you can order them by cpu / memory usage.




          • run top


          • press z and then x to see current sort column highlighted


          • press > to navigate to CPU column



          now you have processes ordered by CPU usage, see if there's anything suspicious







          share|improve this answer














          share|improve this answer



          share|improve this answer








          edited Nov 29 at 13:31









          singrium

          929319




          929319










          answered Nov 29 at 13:04









          janmyszkier

          50827




          50827
























              up vote
              1
              down vote













              If you believe that your system has been compromised:




              1. Take it offline RIGHT NOW.

              2. If you are a skilled user, and wish to conduct a detailed forensic investigation at leisure, then clone the drive.

              3. Do a clean-install of Ubuntu. Format the disk - delete everything and start fresh.

              4. Restore your data from backups taken before the suspected intrusion occurred.






              share|improve this answer

























                up vote
                1
                down vote













                If you believe that your system has been compromised:




                1. Take it offline RIGHT NOW.

                2. If you are a skilled user, and wish to conduct a detailed forensic investigation at leisure, then clone the drive.

                3. Do a clean-install of Ubuntu. Format the disk - delete everything and start fresh.

                4. Restore your data from backups taken before the suspected intrusion occurred.






                share|improve this answer























                  up vote
                  1
                  down vote










                  up vote
                  1
                  down vote









                  If you believe that your system has been compromised:




                  1. Take it offline RIGHT NOW.

                  2. If you are a skilled user, and wish to conduct a detailed forensic investigation at leisure, then clone the drive.

                  3. Do a clean-install of Ubuntu. Format the disk - delete everything and start fresh.

                  4. Restore your data from backups taken before the suspected intrusion occurred.






                  share|improve this answer












                  If you believe that your system has been compromised:




                  1. Take it offline RIGHT NOW.

                  2. If you are a skilled user, and wish to conduct a detailed forensic investigation at leisure, then clone the drive.

                  3. Do a clean-install of Ubuntu. Format the disk - delete everything and start fresh.

                  4. Restore your data from backups taken before the suspected intrusion occurred.







                  share|improve this answer












                  share|improve this answer



                  share|improve this answer










                  answered Nov 29 at 13:36









                  user535733

                  7,46222941




                  7,46222941






























                      draft saved

                      draft discarded




















































                      Thanks for contributing an answer to Ask Ubuntu!


                      • Please be sure to answer the question. Provide details and share your research!

                      But avoid …



                      • Asking for help, clarification, or responding to other answers.

                      • Making statements based on opinion; back them up with references or personal experience.


                      To learn more, see our tips on writing great answers.





                      Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


                      Please pay close attention to the following guidance:


                      • Please be sure to answer the question. Provide details and share your research!

                      But avoid …



                      • Asking for help, clarification, or responding to other answers.

                      • Making statements based on opinion; back them up with references or personal experience.


                      To learn more, see our tips on writing great answers.




                      draft saved


                      draft discarded














                      StackExchange.ready(
                      function () {
                      StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1097115%2fi-am-trying-to-find-out-if-someone-is-running-a-server-on-my-ubuntu-without-my-k%23new-answer', 'question_page');
                      }
                      );

                      Post as a guest















                      Required, but never shown





















































                      Required, but never shown














                      Required, but never shown












                      Required, but never shown







                      Required, but never shown

































                      Required, but never shown














                      Required, but never shown












                      Required, but never shown







                      Required, but never shown







                      -

                      Popular posts from this blog

                      Ellipse (mathématiques)

                      Image
                      Pour les articles homonymes, voir Ellipse. L'ellipse est le lieu des points dont la somme des distances à deux points fixes, dits foyers, est constante. Section du cône ou projection du cercle. En géométrie, une ellipse est une courbe plane fermée obtenue par l’intersection d’un cône de révolution avec un plan, à condition que celui-ci coupe l'axe de rotation du cône ou du cylindre : c'est une conique d'excentricité strictement comprise entre 0 et 1. On peut également la définir comme le lieu des points dont la somme des distances à deux points fixes, dits foyers, est constante (sa construction par la méthode du jardinier est très simple). Dans la vie courante, l’ellipse est la forme qu'on perçoit en regardant un cercle en perspective, ou la figure formée par l’ombre d'un disque sur une surface plane. On retrouve aussi, en première approximation [ 1 ] , des ellipses dans les trajectoires des corps célestes (planètes, comètes ou satellites arti...
                      Read more

                      Quarter-circle Tiles

                      Image
                      up vote 0 down vote favorite I have $99$ identical square tiles, each with a quarter-circle drawn on it like this: [asy] size(1.5cm); draw(Arc((2,0),1,90,180),red+1); draw((0,0)--(2,0)--(2,2)--(0,2)--(0,0)); [/asy] When I arrange the tiles in a $9times 11$ rectangular grid, each with a random orientation, what is the expected value of the number of full circles I form? I think this problem has to do with finding the chance any given 2x2 square has a circle, but I can't find it. expected-value share | cite | improve this question asked Nov 20 at 15:03 6minecraftninja 1 2 ...
                      Read more

                      Mont Emei

                      Image
                      Mont Emei.mw-parser-output .entete.map{background-image:url("//upload.wikimedia.org/wikipedia/commons/7/7a/Picto_infobox_map.png")} Vue du sommet Wanfo du mont Emei Géographie Altitude 3 099  m , Wanfo Coordonnées 29° 31′ 11″ nord, 103° 19′ 57″ est Administration Pays   Chine Province Sichuan Ville-préfecture Leshan Géolocalisation sur la carte : Sichuan Mont Emei Géolocalisation sur la carte : Chine Mont Emei modifier   Paysage panoramique du mont Emei, incluant le paysage panoramique du grand Bouddha de Leshan *   Patrimoine mondial de l'UNESCO Passerelle en bois sur le versant ouest Pays   Chine Subdivision Sichuan Type Mixte Critères (iv) (vi) (x) Superficie 15 400 ha Numéro d’identification 779 Zone géographique Asie et Pacifique  ** Année d’inscription 1996 (20 e session) * Descriptif officiel UNESCO ** Classification géog...
                      Read more