[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Something fishy is going on



Jeez, this has popped up on the list A LOT lately ... check the
archives.

It's an apparently harmless Gnome "Easter Egg." Poor Wanda has come in
for a lot of paranoia the last month or so! :)

Glenn Becker

On Thu, 23 Aug 2001, Bill
Wohler wrote:

>   A fish just swam across my screen. What the hell is up with that?
>
>   I kid you not.
>
>   Here are the current processes. I just updated woody for the first
>   time in a month. Do any of these processes now send up a fish every
>   now and again, or have I been broken into? It looked a lot like
>   /usr/share/pixmaps/gnome-fish.png but was pointing to the right (and
>   swam from left to right).
>
>   PID TTY      STAT   TIME COMMAND
>     1 ?        S      0:09 init [2]
>     2 ?        SW     0:00 [keventd]
>     3 ?        SW     1:40 [kswapd]
>     4 ?        SW     0:00 [kreclaimd]
>     5 ?        SW     0:04 [bdflush]
>     6 ?        SW     0:15 [kupdated]
>     8 ?        SW     0:00 [khubd]
>   136 ?        S      0:00 /sbin/portmap
>   274 ?        S      0:13 /sbin/syslogd
>   277 ?        S      0:00 /sbin/klogd
>   285 ?        S      0:00 /sbin/rpc.statd
>   293 ?        S      0:00 /usr/sbin/gpm -m /dev/mouse -t ps2
>   314 ?        S      0:00 /usr/sbin/inetd
>   329 ?        S      0:00 lpd Waiting
>   370 ?        S      0:00 /usr/lib/postgresql/bin/postmaster -D /var/lib/postgres/data
>   376 ?        S      0:00 /usr/sbin/rwhod -b
>   378 ?        S      0:00 /usr/sbin/rwhod -b
>   479 ?        S      0:01 /usr/sbin/sshd
>   486 ?        S      0:00 /usr/bin/X11/xfs -daemon
>   499 ?        SL     0:00 /usr/sbin/ntpd
>   501 ?        SL     0:00 /usr/sbin/ntpd
>   503 ?        SL     0:00 /usr/sbin/ntpd
>   504 ?        S      0:00 /usr/sbin/atd
>   507 ?        S      0:01 /usr/sbin/cron
>   553 ?        S      0:00 /usr/bin/vmnet-bridge -d /var/run/vmnet-bridge-0.pid /dev/vmnet0 eth0
>   568 ?        S      0:00 /usr/bin/vmnet-netifup -d /var/run/vmnet-netifup-vmnet1.pid /dev/vmnet1 vmnet1
>   584 ?        S      0:00 /usr/bin/vmnet-dhcpd -cf /etc/vmware/vmnet1/dhcpd/dhcpd.conf -lf /etc/vmware/vmnet1/dhcpd/dhcpd.leases -pf /var/run/vmnet-dhcpd-vmnet1.pid vmnet1
>   597 ?        S      0:00 /usr/bin/gdm
>   600 tty1     S      0:00 /sbin/getty 38400 tty1
>   601 tty2     S      0:00 /sbin/getty 38400 tty2
>   602 tty3     S      0:00 /sbin/getty 38400 tty3
>   603 tty4     S      0:00 /sbin/getty 38400 tty4
>   604 tty5     S      0:00 /sbin/getty 38400 tty5
>   605 ?        S<    27:13 /usr/bin/X11/X vt7 -deferglyphs 16 -auth /var/lib/gdm/:0.Xauth :0
>   606 tty6     S      0:00 /sbin/getty 38400 tty6
>   607 ?        S      0:00 /usr/bin/gdm
>   618 ?        S      0:02 /usr/bin/gnome-session --purge-delay=15000
>   688 ?        S      0:00 /usr/bin/ssh-agent -- /usr/bin/gnome-session --purge-delay=15000
>   692 ?        S      0:04 gnome-smproxy --sm-config-prefix /.gnome-smproxy-xpu7If/ --sm-client-id 11d1e910b0000099438714500000177370015
>   694 ?        S      2:02 enlightenment -smfile /home/wohler/.enlightenment/...e_session-XXXXXX -smid 11d1e910b0000099261659700000165750012 -econfdir /home/wohler/.enlightenment -ecachedir /home/wohler/.enlightenment
>   716 ?        S      0:01 gmc --sm-config-prefix /gmc-B5TaG2/ --sm-client-id 11d1e910b0000095267730100000217920009
>   718 ?        S      4:52 esd -nobeeps
>   724 ?        S      0:25 panel --sm-config-prefix /panel.d/default-sVIYjX/ --sm-client-id 11d1e910b0000099568025200000007410006
>   729 ?        S      0:04 jpilot
>   736 ?        S     13:20 emacs
>   738 ?        S      0:10 xwrits
>   742 ?        S      0:07 xfaces
>   745 ?        S      0:00 gnome-name-service
>   748 ?        S      0:03 Eterm --console --name console --exec su -
>   752 ?        S      0:11 Eterm --name gbr
>   842 pts/5    S      0:00 -su
>   881 ?        S      0:12 sendmail: accepting connections
>   882 pts/7    S      0:04 -bash
>   915 ?        S      0:01 mixer_applet --activate-goad-server mixer_applet --goad-fd 10
>   917 ?        S      0:14 gnomexmms --activate-goad-server gnomexmms --goad-fd 10
>   934 ?        S      0:03 asclock_applet --activate-goad-server asclock_applet --goad-fd 14
>  1655 ?        SN     0:37 /usr/sbin/netsaint /etc/netsaint/netsaint.cfg
> 22854 pts/5    S      0:41 emacs
> 22860 ?        S      0:00 /usr/local/lib/emacs/21.0.103/i686-pc-linux-gnu/emacsserver
> 23828 ?        S      0:00 /usr/bin/ispell -a -m -B
> 24227 pts/5    S      0:00 /bin/bash /usr/bin/vvstartdictation
> 24234 pts/5    S      0:11 /usr/lib/j2sdk1.3/bin/i386/native_threads/java -classic -jar speakpad.jar
> 24272 pts/5    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java -classic -jar speakpad.jar
> 24273 pts/5    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java -classic -jar speakpad.jar
> 24274 pts/5    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java -classic -jar speakpad.jar
> 24275 pts/5    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java -classic -jar speakpad.jar
> 24277 pts/5    S      1:40 /usr/lib/j2sdk1.3/bin/i386/native_threads/java -classic -jar speakpad.jar
> 24278 pts/5    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java -classic -jar speakpad.jar
> 24279 pts/5    S      0:03 /usr/lib/j2sdk1.3/bin/i386/native_threads/java -classic -jar speakpad.jar
> 24319 pts/5    S      2:03 /usr/lib/ViaVoice/bin/engine
> 24320 pts/5    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java -classic -jar speakpad.jar
> 24321 pts/5    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java -classic -jar speakpad.jar
> 24322 pts/5    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java -classic -jar speakpad.jar
> 26085 ?        S      0:00 nmbd -a
> 26086 ?        S      0:00 nmbd -a
>  3883 ?        S      0:02 Eterm --name gbr
>  3884 pts/1    S      0:00 -bash
>  5560 ?        S    649:14 vmware -Xq /vmware/win98/win98.cfg
>  5597 ?        S<     0:00 vmware -Xq /vmware/win98/win98.cfg
>  5598 ?        S<     0:01 vmware -Xq /vmware/win98/win98.cfg
>  5599 ?        S<     0:00 vmware -Xq /vmware/win98/win98.cfg
>  5600 ?        S      0:00 smbd
>  8630 pts/5    T      0:00 man dig
>  8634 pts/5    T      0:00 sh -c { export MAN_PN LESS; MAN_PN='dig(1)'; LESS="-Pm\:\$ix8mPm Manual page $MAN_PN ?ltline %lt?L/%L.:byte %bB?s/%s..?e (END):?pB %pB\\%..\$$LESS"; less; }
>  8637 pts/5    T      0:00 less
>  8803 ?        S      0:13 /usr/sbin/named
> 17676 ?        S      1:00 /usr/bin/perl /usr/lib/spamfilter/bin/pattern-server /tmp/.wohler-spamfilter
> 19554 ?        S      0:04 grip
> 19653 ?        S      0:00 grip
> 10823 ?        S      0:03 xmms
> 10824 ?        S      0:00 xmms
> 10825 ?        S      0:02 xmms
> 10826 ?        S      0:00 xmms
> 13840 ?        S      0:00 /usr/local/lib/emacs/21.0.103/i686-pc-linux-gnu/emacsserver
> 16946 ?        S      0:26 /usr/lib/netscape/477/communicator/communicator-smotif.real
> 19878 pts/7    T      0:00 bash
> 21719 ?        S      0:00 /usr/sbin/apache
> 21737 pts/5    S      0:04 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21768 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21769 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21770 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21771 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21772 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21773 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21774 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21775 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21776 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21779 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21780 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21781 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21782 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21783 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21784 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21785 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21786 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21787 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21788 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21789 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21790 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21791 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21792 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21793 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21794 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21795 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21796 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21797 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21798 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21799 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21800 pts/5    S      0:01 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21801 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 21802 pts/5    S      0:00 /usr/lib/j2re1.3/bin/i386/native_threads/java org.apache.tomcat.startup.Tomcat -home /usr/share/tomcat
> 31298 ?        S      0:00 /bin/sh /home/wohler/bin/ssh-run Eterm --name openwave.com --exec ssh -q sanmateo.oneboxcorp.com
> 31309 ?        S      0:00 Eterm --name openwave.com --exec ssh -q sanmateo.oneboxcorp.com
> 31310 pts/0    S      0:13 ssh -q sanmateo.oneboxcorp.com
>  7463 pts/1    S      0:05 /usr/lib/j2sdk1.3/bin/i386/native_threads/java com.openwave.vxmlbuilder.VXMLBuilder
>  7490 pts/1    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java com.openwave.vxmlbuilder.VXMLBuilder
>  7491 pts/1    S      0:01 /usr/lib/j2sdk1.3/bin/i386/native_threads/java com.openwave.vxmlbuilder.VXMLBuilder
>  7492 pts/1    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java com.openwave.vxmlbuilder.VXMLBuilder
>  7493 pts/1    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java com.openwave.vxmlbuilder.VXMLBuilder
>  7494 pts/1    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java com.openwave.vxmlbuilder.VXMLBuilder
>  7495 pts/1    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java com.openwave.vxmlbuilder.VXMLBuilder
>  7496 pts/1    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java com.openwave.vxmlbuilder.VXMLBuilder
>  7497 pts/1    S      0:01 /usr/lib/j2sdk1.3/bin/i386/native_threads/java com.openwave.vxmlbuilder.VXMLBuilder
>  7519 pts/1    S      0:03 /usr/lib/j2sdk1.3/bin/i386/native_threads/java com.openwave.vxmlbuilder.VXMLBuilder
>  7520 pts/1    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java com.openwave.vxmlbuilder.VXMLBuilder
>  7521 pts/1    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java com.openwave.vxmlbuilder.VXMLBuilder
>  7553 pts/1    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java com.openwave.vxmlbuilder.VXMLBuilder
>  7554 pts/1    S      0:00 /usr/lib/j2sdk1.3/bin/i386/native_threads/java com.openwave.vxmlbuilder.VXMLBuilder
> 16807 ?        S      0:00 /usr/sbin/apache
> 18058 ?        S      0:00 /usr/sbin/apache
> 18484 ?        Z      0:00 [sendmail <defunct>]
> 27965 ?        R      0:00 ps ax
>
> --
> Bill Wohler <wohler@newt.com>  http://www.newt.com/wohler/  GnuPG ID:610BD9AD
> Maintainer of comp.mail.mh FAQ and mh-e. Vote Libertarian!
> If you're passed on the right, you're in the wrong lane.
>
>
>

-- 
+----------------+
http://www.burningclown.com
"Everyone's Portal to Nothing At All"
+----------------+



Reply to: