Do I have a VIRUS?

Hey all,

I think I have a virus… even thought they’re rare

Symptoms:

Unknown processes (root)

Disk access light flashing when idle

Disk access light flashing crazy when I connect to the net

Weird “tmp” files appearing so fast you can’t identify them

Windows suffering alike symptoms


We have static IP

Thanks,
 LinuxMonster761

Clamav, Avira, Avast are available for Linux (from package repositories or in rpm format). Try to install one of them and do a search. It would be very interesting - I never saw Linux virus before.
Good luck.

Ok, I did a couple security searches, just 2 decompression bombs in my Windows drive, a bunch of broken executables, ect.

I trying F prod, I’ll see what I get…

I’m also going to post a video of my system with my system activity monitor,
and “tmp” directory visable…

I’ll post ASAP

As you note, its unlikely one gets a Virus in Linux.

What is more likely to happen, from a security perspective, is a 'bot or a user hack’s into one’s pc via ssh, possibly because one has port#22 open, and has not disabled root access, or because one has selected a very common user name with a very common password. There are 'bots on the web which typically make hundred’s of ssh hack attempts/day on practically every Linux PC/router combination that has still left port#22 open.

Another risk, from a security perspective, is one’s PC is accessed physically by a knowledgeable Linux user, who either guesses the root password, or who guesses the user password, and then runs an app to obtain root permissions, where such an app would depend on a security hole that has not been patched.

Once root access has been obtained, malicious software can be planted.

How do you close port# 22?
And how do you disable root access?

Its closed by default. Do not open up ssh access in your firewall in openSUSE and it will be closed. The fact you have to ask suggests it is closed.

In /etc/ssh/ssh_config, under # Authentication set the #PermitRootLogin line to “PermitRootlogin no” (no quotes) . It may be set to “no” by default.

Will do…

Oh, and I forgot to say that my firewall settings keep on changing
without me interfering!

I’ll post my results!

Does this disable me from logging as root?

I have 2 dbus daemons running (?)

And have some Kjournal processes running (?)

I’ll keep you updated…

What leads you to make that observation?

I using “acct”, right? I watch it, firewall stuff comes up by the 10’s!
I watch ls, mkdir, when I’m just watching the acct file in the terminal…

What’s this all about?

I don’t understand your post.

Well, so after typing “lastcomm” I get the commands listed, like firewall stuff,
mkdir, ls, literally not even seconds before I type “lastcomm”

What does this mean?

acct is not installed by default.

What else have you been installing that could possibly cause this? Have you been installing other packages (such as a custom firewall app) other than the nominal openSUSE packages?

Ok, what logs can I post that can help you identify this issue? Please help!

acct is not installed by default.

I know, I installed it…

Not really anything, Pentoho, Java (NetBeans), MySql…

I’ve installed openSUSE 4 times and still have had the same problem,
is it on my Windows partitions?

Is there any logs I can post to help you identify the problem?

oldcpu:

Following is the output from my lastcomm and sa commands. I have been comparing this against an unaffected Opensuse system and where you have a minimum of commands my infected system produces hundreds of commands with firewall changes. The virus or whatever it is creates a continuous stream of temporary files and system file changes. The process monitor lists up to five unknown processes with root -1 as the user. I ran avast on a directory with 5000 files and it reported over 4 mil files scanned. Obviously, the controlling program either confuses avast or creates an endless number of tmp files. I have to show it in multiple posts because it is so long.

Part 1:

               root     ??         0.00 secs Fri Jan 23 14:52
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:52
awk                    root     ??         0.00 secs Fri Jan 23 14:52
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:52
md5sum                 root     ??         0.00 secs Fri Jan 23 14:52
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:52
awk                    root     ??         0.00 secs Fri Jan 23 14:52
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:52
awk                    root     ??         0.00 secs Fri Jan 23 14:52
mkdir                  root     ??         0.00 secs Fri Jan 23 14:52
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:52
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:52
readlink               root     ??         0.00 secs Fri Jan 23 14:52
cat                    root     ??         0.00 secs Fri Jan 23 14:52
chmod                  root     ??         0.00 secs Fri Jan 23 14:52
mktemp                 root     ??         0.00 secs Fri Jan 23 14:52
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:52
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:52
readlink               root     ??         0.00 secs Fri Jan 23 14:52
ls                     root     ??         0.00 secs Fri Jan 23 14:52
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:52
sed                    root     ??         0.00 secs Fri Jan 23 14:52
sed                    root     ??         0.00 secs Fri Jan 23 14:52
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:52
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:52
sed                    root     ??         0.00 secs Fri Jan 23 14:52
sed                    root     ??         0.00 secs Fri Jan 23 14:52
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:52
rm                     root     ??         0.00 secs Fri Jan 23 14:52
netconfig         F    root     ??         0.00 secs Fri Jan 23 14:52
netconfig         F    root     ??         0.00 secs Fri Jan 23 14:52
grep                   root     ??         0.00 secs Fri Jan 23 14:52
netconfig         F    root     ??         0.00 secs Fri Jan 23 14:52
ls                     root     ??         0.00 secs Fri Jan 23 14:52
mkdir                  root     ??         0.00 secs Fri Jan 23 14:52
touch                  root     ??         0.00 secs Fri Jan 23 14:52
dhcpcd-hook            root     ??         0.01 secs Fri Jan 23 14:51
ifup                   root     ??         0.12 secs Fri Jan 23 14:51
mv                     root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
mv                     root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
mv                     root     ??         0.00 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
cat                    root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
cp                     root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51

Part 2:

mv                     root     ??         0.00 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
cat                    root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
cp                     root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2          root     ??         0.01 secs Fri Jan 23 14:51
SuSEfirewall2    S     root     ??         0.24 secs Fri Jan 23 14:51
logger                 root     ??         0.00 secs Fri Jan 23 14:51
rm                     root     ??         0.00 secs Fri Jan 23 14:51
rm                     root     ??         0.00 secs Fri Jan 23 14:51
rm                     root     ??         0.00 secs Fri Jan 23 14:51
ip6tables-batch  S     root     ??         0.02 secs Fri Jan 23 14:51
iptables-batch   S     root     ??         0.01 secs Fri Jan 23 14:51
logger                 root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
perl                   root     ??         0.01 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
sort                   root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
sort                   root     ??         0.00 secs Fri Jan 23 14:51


Part 3:

modprobe               root     ??         0.01 secs Fri Jan 23 14:51
modprobe               root     ??         0.00 secs Fri Jan 23 14:51
modprobe               root     ??         0.01 secs Fri Jan 23 14:51
modprobe               root     ??         0.02 secs Fri Jan 23 14:51
modprobe               root     ??         0.00 secs Fri Jan 23 14:51
modinfo                root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
modinfo                root     ??         0.00 secs Fri Jan 23 14:51
modinfo                root     ??         0.00 secs Fri Jan 23 14:51
ip6tables              root     ??         0.00 secs Fri Jan 23 14:51
ip6tables        S     root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2     F    root     ??         0.00 secs Fri Jan 23 14:51
logger                 root     ??         0.00 secs Fri Jan 23 14:51
mktemp                 root     ??         0.01 secs Fri Jan 23 14:51
mktemp                 root     ??         0.00 secs Fri Jan 23 14:51
getopt                 root     ??         0.00 secs Fri Jan 23 14:51
tty                    root     ??         0.00 secs Fri Jan 23 14:51
SuSEfirewall2          root     ??         0.06 secs Fri Jan 23 14:51
iptables         S     root     ??         0.00 secs Fri Jan 23 14:51
getopt                 root     ??         0.00 secs Fri Jan 23 14:51
tty                    root     ??         0.00 secs Fri Jan 23 14:51
grep                   root     ??         0.00 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
ifup-services          root     ??         0.02 secs Fri Jan 23 14:51
ifup-route             root     ??         0.05 secs Fri Jan 23 14:51
ifup-route        F    root     ??         0.00 secs Fri Jan 23 14:51
ip                     root     ??         0.00 secs Fri Jan 23 14:51
ifup-route        F    root     ??         0.00 secs Fri Jan 23 14:51
ifup-route        F    root     ??         0.00 secs Fri Jan 23 14:51
ifup-route        F    root     ??         0.00 secs Fri Jan 23 14:51
ip                     root     ??         0.00 secs Fri Jan 23 14:51
ifup-route        F    root     ??         0.00 secs Fri Jan 23 14:51
ip                     root     ??         0.00 secs Fri Jan 23 14:51
ifup-route        F    root     ??         0.00 secs Fri Jan 23 14:51
ip                     root     ??         0.00 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
logger                 root     ??         0.00 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
sed                    root     ??         0.00 secs Fri Jan 23 14:51
lspci            S     root     ??         0.13 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
cat                    root     ??         0.00 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
cat                    root     ??         0.00 secs Fri Jan 23 14:51
mv                     root     ??         0.01 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
mv                     root     ??         0.00 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
cat                    root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
mv                     root     ??         0.00 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
cat                    root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
mv                     root     ??         0.00 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
cat                    root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
cp                     root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
checkproc        S     root     ??         0.01 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
awk                    root     ??         0.00 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
ifup              F    root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
ifdown                 root     ??         0.09 secs Fri Jan 23 14:51
rm                     root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
rm                     root     ??         0.00 secs Fri Jan 23 14:51
mv                     root     ??         0.00 secs Fri Jan 23 14:51
ifdown            F    root     ??         0.00 secs Fri Jan 23 14:51
cat                    root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
cp                     root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
mv                     root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
mv                     root     ??         0.00 secs Fri Jan 23 14:51
ifdown            F    root     ??         0.00 secs Fri Jan 23 14:51
cat                    root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
cp                     root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
ifdown-route           root     ??         0.04 secs Fri Jan 23 14:51
ifdown-route      F    root     ??         0.00 secs Fri Jan 23 14:51
ip                     root     ??         0.00 secs Fri Jan 23 14:51
ifdown-route      F    root     ??         0.00 secs Fri Jan 23 14:51
ifdown-route      F    root     ??         0.00 secs Fri Jan 23 14:51
ifdown-route      F    root     ??         0.00 secs Fri Jan 23 14:51
ip                     root     ??         0.00 secs Fri Jan 23 14:51
ifdown-route      F    root     ??         0.00 secs Fri Jan 23 14:51
ip                     root     ??         0.00 secs Fri Jan 23 14:51
ifdown-route      F    root     ??         0.00 secs Fri Jan 23 14:51
ip                     root     ??         0.00 secs Fri Jan 23 14:51
ifdown-services        root     ??         0.03 secs Fri Jan 23 14:51
ifdown            F    root     ??         0.00 secs Fri Jan 23 14:51
logger                 root     ??         0.00 secs Fri Jan 23 14:51
ifdown            F    root     ??         0.00 secs Fri Jan 23 14:51
ifdown            F    root     ??         0.00 secs Fri Jan 23 14:51
ifdown            F    root     ??         0.00 secs Fri Jan 23 14:51
sed                    root     ??         0.00 secs Fri Jan 23 14:51
lspci            S     root     ??         0.11 secs Fri Jan 23 14:51
ifdown            F    root     ??         0.00 secs Fri Jan 23 14:51
ifdown            F    root     ??         0.00 secs Fri Jan 23 14:51
cat                    root     ??         0.00 secs Fri Jan 23 14:51
ifdown            F    root     ??         0.00 secs Fri Jan 23 14:51
cat                    root     ??         0.00 secs Fri Jan 23 14:51
mv                     root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
mv                     root     ??         0.00 secs Fri Jan 23 14:51
ifdown            F    root     ??         0.00 secs Fri Jan 23 14:51


Part 4:

cat                    root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
mv                     root     ??         0.00 secs Fri Jan 23 14:51
ifdown            F    root     ??         0.00 secs Fri Jan 23 14:51
cat                    root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
cp                     root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
ifdown            F    root     ??         0.00 secs Fri Jan 23 14:51
ifdown            F    root     ??         0.00 secs Fri Jan 23 14:51
checkproc        S     root     ??         0.01 secs Fri Jan 23 14:51
ifdown            F    root     ??         0.00 secs Fri Jan 23 14:51
awk                    root     ??         0.00 secs Fri Jan 23 14:51
ifdown            F    root     ??         0.00 secs Fri Jan 23 14:51
ifdown            F    root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
syslog                 root     ??         0.01 secs Fri Jan 23 14:51
udevd            SF    root     ??         0.00 secs Fri Jan 23 14:51
killproc               root     ??         0.00 secs Fri Jan 23 14:51
udevd            SF    root     ??         0.00 secs Fri Jan 23 14:51
killproc               root     ??         0.00 secs Fri Jan 23 14:51
udevd             F    root     ??         0.00 secs Fri Jan 23 14:51
killproc               root     ??         0.00 secs Fri Jan 23 14:51
udevd             F    root     ??         0.00 secs Fri Jan 23 14:51
killproc               root     ??         0.00 secs Fri Jan 23 14:51
syslog            F    root     ??         0.00 secs Fri Jan 23 14:51
stty             S     root     ??         0.00 secs Fri Jan 23 14:51
uname                  root     ??         0.00 secs Fri Jan 23 14:51
logger                 root     ??         0.00 secs Fri Jan 23 14:51
netconfig              root     ??         0.06 secs Fri Jan 23 14:51
rm                     root     ??         0.00 secs Fri Jan 23 14:51
cat                    root     ??         0.00 secs Fri Jan 23 14:51
netconfig         F    root     ??         0.00 secs Fri Jan 23 14:51
ntp-runtime            root     ??         0.02 secs Fri Jan 23 14:51
rm                     root     ??         0.00 secs Fri Jan 23 14:51
rm                     root     ??         0.00 secs Fri Jan 23 14:51
ntp-runtime       F    root     ??         0.00 secs Fri Jan 23 14:51
grep                   root     ??         0.00 secs Fri Jan 23 14:51
ntp-runtime       F    root     ??         0.00 secs Fri Jan 23 14:51
md5sum                 root     ??         0.00 secs Fri Jan 23 14:51
ntp-runtime       F    root     ??         0.00 secs Fri Jan 23 14:51
awk                    root     ??         0.00 secs Fri Jan 23 14:51
ntp-runtime       F    root     ??         0.00 secs Fri Jan 23 14:51
md5sum                 root     ??         0.00 secs Fri Jan 23 14:51
ntp-runtime       F    root     ??         0.00 secs Fri Jan 23 14:51
awk                    root     ??         0.00 secs Fri Jan 23 14:51
ntp-runtime       F    root     ??         0.00 secs Fri Jan 23 14:51
awk                    root     ??         0.00 secs Fri Jan 23 14:51
mkdir                  root     ??         0.00 secs Fri Jan 23 14:51
ntp-runtime       F    root     ??         0.00 secs Fri Jan 23 14:51
ntp-runtime       F    root     ??         0.00 secs Fri Jan 23 14:51
readlink               root     ??         0.00 secs Fri Jan 23 14:51
cat                    root     ??         0.00 secs Fri Jan 23 14:51
chmod                  root     ??         0.00 secs Fri Jan 23 14:51
mktemp                 root     ??         0.00 secs Fri Jan 23 14:51
ntp-runtime       F    root     ??         0.00 secs Fri Jan 23 14:51
grep                   root     ??         0.00 secs Fri Jan 23 14:51
ls                     root     ??         0.00 secs Fri Jan 23 14:51
ntp-runtime       F    root     ??         0.00 secs Fri Jan 23 14:51
sed                    root     ??         0.00 secs Fri Jan 23 14:51
sed                    root     ??         0.00 secs Fri Jan 23 14:51
ntp-runtime       F    root     ??         0.00 secs Fri Jan 23 14:51
ntp-runtime       F    root     ??         0.00 secs Fri Jan 23 14:51
sed                    root     ??         0.00 secs Fri Jan 23 14:51
sed                    root     ??         0.00 secs Fri Jan 23 14:51
ntp-runtime       F    root     ??         0.00 secs Fri Jan 23 14:51
netconfig         F    root     ??         0.00 secs Fri Jan 23 14:51
nis                    root     ??         0.07 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
nisdomainname          root     ??         0.00 secs Fri Jan 23 14:51
rm                     root     ??         0.00 secs Fri Jan 23 14:51
rm                     root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
grep                   root     ??         0.00 secs Fri Jan 23 14:51

Part 5:

nis               F    root     ??         0.00 secs Fri Jan 23 14:51
md5sum                 root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
awk                    root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
md5sum                 root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
awk                    root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
awk                    root     ??         0.00 secs Fri Jan 23 14:51
mkdir                  root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
readlink               root     ??         0.00 secs Fri Jan 23 14:51
cat                    root     ??         0.00 secs Fri Jan 23 14:51
chmod                  root     ??         0.00 secs Fri Jan 23 14:51
mktemp                 root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
readlink               root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
grep                   root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
grep                   root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
grep                   root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
grep                   root     ??         0.00 secs Fri Jan 23 14:51
ls                     root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
sed                    root     ??         0.00 secs Fri Jan 23 14:51
sed                    root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
sed                    root     ??         0.00 secs Fri Jan 23 14:51
sed                    root     ??         0.00 secs Fri Jan 23 14:51
nis               F    root     ??         0.00 secs Fri Jan 23 14:51
netconfig         F    root     ??         0.00 secs Fri Jan 23 14:51
dns-dnsmasq            root     ??         0.01 secs Fri Jan 23 14:51
netconfig         F    root     ??         0.00 secs Fri Jan 23 14:51
dns-bind               root     ??         0.01 secs Fri Jan 23 14:51
netconfig         F    root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver           root     ??         0.02 secs Fri Jan 23 14:51
rm                     root     ??         0.00 secs Fri Jan 23 14:51
rm                     root     ??         0.00 secs Fri Jan 23 14:51
cp                     root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
grep                   root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
md5sum                 root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
awk                    root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
md5sum                 root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
awk                    root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
awk                    root     ??         0.00 secs Fri Jan 23 14:51
mkdir                  root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
readlink               root     ??         0.00 secs Fri Jan 23 14:51
cat                    root     ??         0.00 secs Fri Jan 23 14:51
chmod                  root     ??         0.00 secs Fri Jan 23 14:51
mktemp                 root     ??         0.01 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
readlink               root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
grep                   root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
grep                   root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
grep                   root     ??         0.00 secs Fri Jan 23 14:51
ls                     root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
sed                    root     ??         0.00 secs Fri Jan 23 14:51
sed                    root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
sed                    root     ??         0.00 secs Fri Jan 23 14:51
sed                    root     ??         0.00 secs Fri Jan 23 14:51
dns-resolver      F    root     ??         0.00 secs Fri Jan 23 14:51
netconfig         F    root     ??         0.00 secs Fri Jan 23 14:51
netconfig         F    root     ??         0.00 secs Fri Jan 23 14:51
ls                     root     ??         0.00 secs Fri Jan 23 14:51
netconfig         F    root     ??         0.00 secs Fri Jan 23 14:51
netconfig         F    root     ??         0.00 secs Fri Jan 23 14:51
ls                     root     ??         0.00 secs Fri Jan 23 14:51
netconfig         F    root     ??         0.00 secs Fri Jan 23 14:51
awk                    root     ??         0.00 secs Fri Jan 23 14:51
mkdir                  root     ??         0.00 secs Fri Jan 23 14:51
touch                  root     ??         0.00 secs Fri Jan 23 14:51
dhcpcd-hook            root     ??         0.02 secs Fri Jan 23 14:5