On Mon, Jan 6, 2025 at 1:00 PM Will McDonald wmcdonald@gmail.com wrote:
On Mon, 6 Jan 2025 at 17:50, Jeffrey Walton noloader@gmail.com wrote:
On Mon, Jan 6, 2025 at 12:36 PM Tim Evans tkevans@tkevans.com wrote:
Have noticed very heavy sluggishness in my F-41 system response over the past week or so. Totally idle system showing steady 1.0+ system load average; lightly used system showing 2.0+. Some apps' response delayed 30 seconds or longer.
Top shows tracker-miner-fs-3 steady at 18-35% CPU
I would be interested to learn about how the malware got on your system. It sounds like it managed to install itself with root privileges.
Do you recall what you were doing around the time it showed up or you experienced the slow down?
You might want to slow down before jumping to the 'malware' conclusion.
My immediate thought was 'oh, that doesn't sound good', too but if you search for that process name...
https://duckduckgo.com/?t=ffab&q=tracker-miner-fs-3&atb=v443-1&i...
Or check your own system, this looks like it's a completely legitimate package. Whether it's something you want/need or not is another matter but we shouldn't jump to conclusions without some base evidence...
[wmcdonald@fedora ~ ]$ ps -ef | grep [t]racker wmcdona+ 3673 2022 0 Jan02 ? 00:00:04 /usr/libexec/tracker-miner-fs-3
[wmcdonald@fedora ~ ]$ rpm -qf /usr/libexec/tracker-miner-fs-3 tracker-miners-3.7.4-2.fc41.x86_64
[wmcdonald@fedora ~ ]$ rpm -qi `rpm -qf /usr/libexec/tracker-miner-fs-3` Name : tracker-miners Version : 3.7.4 Release : 2.fc41 Architecture: x86_64 Install Date: Thu 02 Jan 2025 14:35:31 GMT Group : Unspecified Size : 4559227 License : GPL-2.0-or-later AND LGPL-2.1-or-later Signature : RSA/SHA256, Thu 12 Dec 2024 19:10:53 GMT, Key ID d0622462e99d6ad1 Source RPM : tracker-miners-3.7.4-2.fc41.src.rpm Build Date : Thu 12 Dec 2024 15:47:19 GMT Build Host : buildvm-x86-14.iad2.fedoraproject.org Packager : Fedora Project Vendor : Fedora Project URL : https://gnome.pages.gitlab.gnome.org/tracker/ Bug URL : https://bugz.fedoraproject.org/tracker-miners Summary : Tracker miners and metadata extractors Description : Tracker is a powerful desktop-neutral first class object database, tag/metadata database and search tool.
This package contains various miners and metadata extractors for tracker.
Oh, it sounded like one of those cryptocurrency miners (to me).
What a dumb name for a legitimate package...
Jeff