On Mon, Jan 6, 2025 at 1:00 PM Will McDonald <wmcdonald@xxxxxxxxx> wrote: > > On Mon, 6 Jan 2025 at 17:50, Jeffrey Walton <noloader@xxxxxxxxx> wrote: >> >> On Mon, Jan 6, 2025 at 12:36 PM Tim Evans <tkevans@xxxxxxxxxxx> wrote: >> > >> > Have noticed very heavy sluggishness in my F-41 system response over the >> > past week or so. Totally idle system showing steady 1.0+ system load >> > average; lightly used system showing 2.0+. Some apps' response delayed >> > 30 seconds or longer. >> > >> > Top shows tracker-miner-fs-3 steady at 18-35% CPU >> >> I would be interested to learn about how the malware got on your >> system. It sounds like it managed to install itself with root >> privileges. >> >> Do you recall what you were doing around the time it showed up or you >> experienced the slow down? > > > You might want to slow down before jumping to the 'malware' conclusion. > > My immediate thought was 'oh, that doesn't sound good', too but if you search for that process name... > > https://duckduckgo.com/?t=ffab&q=tracker-miner-fs-3&atb=v443-1&ia=web > > Or check your own system, this looks like it's a completely legitimate package. Whether it's something you want/need or not is another matter but we shouldn't jump to conclusions without some base evidence... > > [wmcdonald@fedora ~ ]$ ps -ef | grep [t]racker > wmcdona+ 3673 2022 0 Jan02 ? 00:00:04 /usr/libexec/tracker-miner-fs-3 > > [wmcdonald@fedora ~ ]$ rpm -qf /usr/libexec/tracker-miner-fs-3 > tracker-miners-3.7.4-2.fc41.x86_64 > > [wmcdonald@fedora ~ ]$ rpm -qi `rpm -qf /usr/libexec/tracker-miner-fs-3` > Name : tracker-miners > Version : 3.7.4 > Release : 2.fc41 > Architecture: x86_64 > Install Date: Thu 02 Jan 2025 14:35:31 GMT > Group : Unspecified > Size : 4559227 > License : GPL-2.0-or-later AND LGPL-2.1-or-later > Signature : RSA/SHA256, Thu 12 Dec 2024 19:10:53 GMT, Key ID d0622462e99d6ad1 > Source RPM : tracker-miners-3.7.4-2.fc41.src.rpm > Build Date : Thu 12 Dec 2024 15:47:19 GMT > Build Host : buildvm-x86-14.iad2.fedoraproject.org > Packager : Fedora Project > Vendor : Fedora Project > URL : https://gnome.pages.gitlab.gnome.org/tracker/ > Bug URL : https://bugz.fedoraproject.org/tracker-miners > Summary : Tracker miners and metadata extractors > Description : > Tracker is a powerful desktop-neutral first class object database, > tag/metadata database and search tool. > > This package contains various miners and metadata extractors for tracker. Oh, it sounded like one of those cryptocurrency miners (to me). What a dumb name for a legitimate package... Jeff -- _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
