kubuntu-users Digest, Vol 88, Issue 6

[Lucas L]

Date: Thu, 03 May 2012 01:51:28 -0400

> From: Clay Weber <clay at claydoh.com>
> To: Kubuntu user technical support <kubuntu-users at lists.ubuntu.com>
> Subject: Re: bin folder with a "check-home" file appeared in Home
>        directory
> Message-ID: <2465661.acC4aj7SY9 at lark-latitude-d630>
> Content-Type: text/plain; charset="utf-8"
>
> On Thursday, May 03, 2012 01:51:20 AM Lucas L wrote:
> >
> > Hi,
> > I recently noticed a new folder in my Home directory, with a file named
> "check-home". File appears to be an executable but has no extension, an it
> is
> 20,7 KiB.
> >
> >
> > I tried to open it with kate and, apart from the strange characters,
> close
> to the end of the file I could read the following lines:
> >
> >
> > /proc/self/exe .config/.check-home.pid /proc/%s/exe %d .tar CPUINFO=`cat
> /proc/cpuinfo | grep 'model name'`;LSPCI=`lspci`;echo ${CPUINFO}${LSPCI} |
> sha1sum | head -c 40 check-filesystem /proc/stat btime /bin/sh /bin/busybox
> test4.lnx-ads.com test6.lnx-ads.com   UDP
> >  -c /dev/urandom .local tcp udp /etc/services ?              ? ?  ?
> /etc/hosts DNSCACHEIP /etc/resolv.conf nameserver search domain
> /etc/passwd
> >
> >
> > Does anybody know something about this file? Is it dangerous or should I
> delete it?
> > Thanks in advance,
> > Lucas
> >
>
> What folder has this? Some application must have created this when it was
> first
> run, that folder name will be the clue. I don't have such a file myself.
> --
> clay
>


The folder name is "bin" and appeared in the Home directory...
/home/user/bin/check-home, to make it clear. I just noticed the folder and
the file yesterday night, but the "modified date" is begining april.

I don't remember installing new software, apart from gimp-plugin-registry via
the terminal.

I couldn't find anything on Google about this "check-home" file.
Thanks,
Lucas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/kubuntu-users/attachments/20120503/d5ae0ce7/attachment.html>