63
"Windows" process using too much Memory (Dual boot setup) (lemmy.ml)
submitted 7 months ago by to c/linux@lemmy.ml
32 comments fedilink hide all child comments
 

When I start my pc, (Nobara 43) Memory is up to 70% usage. I dual boot, but use Windows like 5% of the time. I have a Swap partition (64gb), but it shows 0b usage. Is it safe to kill the windows process? Can anyone shed some light into whats going on? I was starting to think this is sketchy lol

UPDATE: It most likely was a Winboat process that started up every time :p

Terminal results of "top" command, highlighting "windows" process using 52.4% of memory.
you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 7 months ago (4 children)

This doesn't really say much; this could be legitimate software thinking it crashed, or it could be malware trying to hide itself.

Try seeing if sudo find / -type f -name windows tells you anything about where it's installed. This command searches through / (all files) to find a file (-type f) that is named windows (the same as the process name).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 1 point 7 months ago* (last edited 7 months ago)

    find will catch more if you wildcard the name with "*windows*", but that's a moot point: we don't have enough info to jump to "malware" conclusions here.

    Looking for malware by hunting for the name in a procid list won't usually get far, you'd be better to netstat to see what various processes are listening or phoning home to confirm suspicions of malware.

  • permalink
  • fedilink
  • source
  • parent
  • [–] [S] 1 point 7 months ago (2 children)

    weird

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 8 points 7 months ago (1 child)

    Heavily leaning towards malware; normal software tends to name itself the same on disk and in ram, this seems to be it trying to hide itself.

    Since there's now nothing to go off of for how this got on your system, the best course of action is to back up your documents and reinstall your system fresh. To avoid malware in the future, stick to the built-in app store and system repositories where possible.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •