0t79JeIfK01RHyzo comments on How to check pc for spyware and can you say there is no spyware or is it probability

Linux

68,717 readers

5,213 active

617 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
No misinformation
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 7 years ago

moderators

[–] 0t79JeIfK01RHyzo@lemmy.ml 24 points 6 months ago* (last edited 6 months ago) (3 children)

You can

Watch network access - What is communicating to the outside? Why is it? What is it communicating? I like sniffnet
Watch CPU and GPU usage - What is using resources? Why is it? I like Mission Center and ps auxf in the terminal
What is using the disk? I like Filelight and Disk Usage Analyzer
Run AV software. I don't have any recommendations.
And I guess sometimes you can also find it when benchmarking software because you want the absolute best performance.

You can also assume you are compromised and use a solution like a Faraday cage. If you're trying to detect advanced spyware, it might be better to check network activity from outside the device like what network activity is the router managing for the computer.

permalink

fedilink

source

hideshow 3 child comments

[–] bamboo@lemmy.blahaj.zone 13 points 6 months ago

FWIW, if you suspect your machine has been compromised, the binaries for common tools like ps and top shouldn't be relied upon since those probably were tampered with to hide the malicious program from the output. At that point, you'd probably want to check each running process manually under /proc/.

permalink

fedilink

source

parent

[–] MrSoup@lemmy.zip 5 points 6 months ago

As of AV software I would like to point to ClamAV and Rkhunter.
Both should be available in most distro's package repository.

permalink

fedilink

source

parent

[–] eldavi@lemmy.ml 4 points 6 months ago

@RavenofDespair@lemmy.ml to add to this; you can use a firewall that's aware of what your systems is trying to contact. pfsense does this in their premium products and i've heard ubiquiti starting doing this as well.

permalink

fedilink

source

parent