Virus or Akonadi error?? : Comma_Hidden_Directory

Dear Forum - i have mentioned this in an akonadi thread, when i ought to have started a new thread - therefore please excuse me for a repeat :frowning:

i have a hidden directory ./ in my home directory containing some old
*std.vcf_3 files with old e-mail addresses

BUT recently some akonadi process or Virus is creating a Directory prefixed with a Comma
named ,/addy containing a file :

-rw-r–r-- 1 home users 0 2010-10-20 21:38 std.vcf__3

next i see, in the hidden ./ directory, an entry :-

WARNING_README.txt
"Important Warning!!!

Don’t create or copy vCards inside this folder manually, they are managed by the Akonadi framework!"

Thus . . . I worry . . . Is Akonadi the program that is creating the Comma-Prefixed Directory
named " ,/addy "

OR

Is this a Virus ??

Thank you for all possible Help and Clarification ??

anna

Dear Anna,
in order to give you a reliable response people would need the following indications:

  • Which version of OpenSUSE do you currently use?
  • Was this a fresh install or an upgrade?
  • If it was an upgrade, from which version?
  • What desktop environment do you use?
  • Which version has the desktop environment?
  • Can you post (by using the “code” formatting) the exact path of the directory that creates itself?

Sorry if this seems to be tedious but without it will be hard that you get reliable and swift help.
Greetings.

To give these infos:
Open a terminal window (the black thing called Konsole) and type in the following (and post the result here using the code formatting as well (using copy and paste):


uname -a
cat /etc/issue
kded --version

The first command will give you the kernel version of your system.
The second command will give you the version of OpenSUSE (and of any other linux system)
The last command will give you all useful details of your KDE version if you have KDE installed (what I think).
If you use gnome instead you can try following command (I do not use gnome, so no guarantee that it will work):

gnome-about

Dear stanakov - many thanks

uname -a
Linux AIG 2.6.34.7-0.4-desktop #1 SMP PREEMPT 2010-10-07 19:07:51 +0200 i686 i686 i386 GNU/Linux

cat /etc/issue
Welcome to openSUSE 11.3 “Teal” - Kernel \r (\l).

kded --version
Qt: 3.3.8b
KDE: 3.5.10 “release 41”
KDE Daemon: $Id: kded.cpp 711061 2007-09-11 09:42:51Z tpatzig $

i believe i did a fresh install [cannot remember] : previously i used openSuSE 11.2

  • believe i installed this 11.3 version KDE shortly after July 20

  • again : many thanks
    anna

I am surprised. Apparently your issue could be connected to the KDE3.5.10 version you are using. I would have expected KDE 4. Did you install KDE3.5.10 on purpouse?
11.3 does not offer KDE3.5.10 anymore so I would suspect you did a manual install?
Could you also join please the exact path to the folder that is in question (you do this easily by opening konqueror (since you use 3.5.10 and to highlight the icon of the directory and then choosing with a right click the properties of the folder (this should give you the path that you might paste here (code format if possible please to ease reading of who is going to follow this).
Thx.

exact path:
/home/my_home_directory_name/,addy

KDE versions installed :


patterns-openSUSE-kde4_multimedia-11.3-22.1.i586
liblockdev1-1.0.3_git201003141408-2.7.i586
polkit-kde-1-0.95.1.svn1074649-4.2.i586
python-kde4-4.4.4-1.5.i586
kdebase4-nsplugin-4.4.4-1.5.i586
kdebase4-openSUSE-lang-11.3-8.5.noarch
kdepimlibs4-4.4.4-2.1.1.i586
kdegames4-carddecks-default-4.4.4-1.4.noarch
kdemultimedia4-4.4.4-1.4.i586
patterns-openSUSE-kde4-11.3-22.1.i586
kdelibs4-core-4.4.4-3.1.1.i586
kdelibs3-3.5.10-41.1.i586
kde3-i18n-en_GB-base-3.5.10-11.1.noarch
kdelibs3-doc-3.5.10-41.1.i586
patterns-openSUSE-kde4_pure-11.3-22.1.i586
patterns-openSUSE-kde4_games-11.3-22.1.i586
kde4-filesystem-4.4.4-1.2.i586
kdegames4-carddecks-other-4.4.4-1.4.noarch
libproxy1-config-kde4-0.4.3-1.3.i586
OpenOffice_org-kde4-3.2.1.4-1.6.i586
kdebase4-libkonq-4.4.4-1.5.i586
python-kdebase4-4.4.4-5.2.i586
kdenetwork4-filesharing-4.4.4-1.4.i586
kdegames4-4.4.4-1.5.i586
skanlite-0.4.kde4.4.0-4.2.i586
kdebase4-openSUSE-11.3-8.5.i586
patterns-openSUSE-kde4_basis-11.3-22.1.i586
NetworkManager-openvpn-kde4-0.9.svn1057339-4.1.i586
patterns-openSUSE-kde4_imaging-11.3-22.1.i586
kdelibs3-default-style-3.5.10-41.1.i586
kdebase4-workspace-ksysguardd-4.4.4-6.1.1.i586
libkde4-4.4.4-3.1.1.i586
kdelibs4-4.4.4-3.1.1.i586
kde4-kgreeter-plugins-4.4.4-6.1.1.i586
kdegraphics4-4.4.4-2.1.1.i586
kde4-l10n-en_GB-4.4.4-1.4.noarch
kdebase3-3.5.10.1-7.2.i586
kdebase4-runtime-4.4.4-3.1.2.i586
patterns-openSUSE-kde4_utilities-11.3-22.1.i586
patterns-openSUSE-kde4_internet-11.3-22.1.i586
kdelibs4-branding-openSUSE-11.3-8.5.i586
kde4-l10n-el-4.4.4-1.4.noarch
bundle-lang-kde-en-11.3-8.1.noarch
kdebase4-runtime-branding-openSUSE-11.3-8.5.i586
lockdev-1.0.3_git201003141408-2.7.i586
mozilla-kde4-integration-0.6.2-1.9.i586
kdepasswd-4.4.4-1.5.i586
kdebase4-4.4.4-1.5.i586
kdebase4-session-4.4.4-7.1.i586
NetworkManager-kde4-libs-0.9.svn1057339-4.1.i586
NetworkManager-pptp-kde4-0.9.svn1057339-4.1.i586
NetworkManager-kde4-lang-0.9.svn1057339-4.1.noarch
kdebase4-runtime-xine-4.4.4-3.1.2.i586
libkdepimlibs4-4.4.4-2.1.1.i586
kdepim4-4.4.4-3.1.1.i586
kdebase4-workspace-4.4.4-6.1.1.i586
kde3-i18n-el-base-3.5.10-11.1.noarch
kdebase3-nsplugin-3.5.10.1-7.2.i586
patterns-openSUSE-kde4_utilities_opt-11.3-22.1.i586
kdeartwork4-weatherwallpapers-4.4.4-1.4.noarch
kdebase4-workspace-branding-openSUSE-11.3-8.5.i586
NetworkManager-vpnc-kde4-0.9.svn1057339-4.1.i586
kdeartwork4-screensaver-4.4.4-2.1.1.i586
libkdecore4-4.4.4-3.1.1.i586
kdepim4-runtime-4.4.4-2.1.1.i586
kde3-i18n-el-3.5.10-11.1.noarch
kde3-i18n-en_GB-3.5.10-11.1.noarch
patterns-openSUSE-kde4_office-11.3-22.1.i586
patterns-openSUSE-kde4_yast-11.3-22.1.i586
patterns-openSUSE-sw_management_kde4-11.3-22.1.i586
libkdegames4-4.4.4-1.5.i586
NetworkManager-kde4-0.9.svn1057339-4.1.i586
libkdepim4-4.4.4-3.1.1.i586
kdepim4-wizards-4.4.4-3.1.1.i586
opera-kde4-10.63-1.1.1.i586
kdebase3-runtime-3.5.10.1-7.2.i586

  • cannot quite remember, but i think kde4 is installed by openSuSE 11.3
    but afterwards i used “yast” to install kde3 because i thought something or other [do not remember just what] needed kde3

thanks and best regards
anna

Two KDE versions on one system are usually not compatible. A lot of errors can occur when using the two in parallel. The reason is that some paths may be messed up and that some of the libraries exist with a same name but a different versions for the two desktops. Currently your computer “thinks” that you have the KDE3.5.10 base package installed, but you are probably using the KDE4 desktop. This is (for what I understand the reason for the folder being created. I would suppose the folder appeared after you installed an update to kde4 (because probably you did override a KDE3 library). The only good solution IMHO is to manually control Yast for everything of KDE3 and to take it of (sustituting the corresponding KDE4 version). The method is slow but probably necessary as the system is already “cocktail” therefore to sanify the libraries you will have to do it by hand (using the search command: list all packages that begin with KDE and controll for the version). Sorry but I think this is at the base of your current problem.

At the login screen here
http://dl.dropbox.com/u/10573557/Session%20Login/session.type.png
Can you select kde4 and try logging in

You need auto login disabled to have a login screen in the first place
Disable Auto-Login


thanks : will do it!

On 2010-10-22 08:36, stakanov wrote:

> version). Sorry but I think this is at the base of your current problem.

I doubt it.


Cheers / Saludos,

Carlos E. R.
(from 11.2 x86_64 “Emerald” at Telcontar)

Good to hear you, Carlos

  • i respect your scepticism . . . one never can tell . . . yet !! :open_mouth:

best regards
anna

I also doubt it, since actually KDE3 and KDE4 are divided quite clearly (on openSUSE): the binaries of KDE3 are stored in /opt/kde3/bin, while the KDE4-binaries are in /usr/bin - the KDE3 config files are in ~/.kde and KDE4s in ~/.kde4 (~ = /home/$username).

Furthermore the command ‘kded --version’ is only relating to KDE3, it will not provide any info on KDE4. To get the version info on KDE4, call this command:

kde4-config --version

Edit: …but I don’t think there’s a need to be overly concerned. It’s very unlikely that this directory is a sign of any malware. I personally would test to move it somewhere else and check if it gets recreated.


Dear caf4926 ~ thank you : i have disabled auto-log-in . . . then logged out . . .
selected KDE . . . and then logged back on : i did not see kde4 as a selection-option,
perhaps because with Yast i have removed the kde3 stuff !!

BUT :- Hi Carlos :slight_smile: looks your scepticism was on-target : when i just logged back in with only kde4 libraries. i again see :

     /home/user[me]/,addy

. . . the /,addy directory contains just one file : std.vcf_3 : 0 BYTES : dated today, just now!!

thanks
best regards
anna


thank you gropiuskalle

output is :-

kde4-config --version
Qt: 4.6.3
KDE Development Platform: 4.4.4 (KDE 4.4.4) “release 3”
kde4-config: 1.0

best regards
anna

anna, have you noticed nrickerts comment in the other thread?

Seems like such prefixes are not so unusual after all. Maybe someone else using KMail (as you obviously do?) can confirm that (I myself use Thunderbird).

thank you ~ this is also news to me ~ yes, i do use kmail :slight_smile:

On 2010-10-22 16:06, anna tabanna wrote:

>
> BUT :- Hi Carlos :slight_smile: looks your scepticism was on-target :
> when i just logged back in with only kde4 libraries. i again see :
>
> /home/user[me]/,addy
>
> . . the /,addy directory contains just one file : std.vcf_3 : 0
> BYTES : dated today, just now!!

X’-)

I think it is, either a bad local configuration somewhere, or a bug. Simply somebody instead of
typing dot-something, typed comma-something. They are sometimes difficult to notice, specially if
you are programming hundred of code lines.

What I would do is create a new user, and see if it gets that directory while using the software you
think suspect. There is actually a trick using apparmor audit to track who
creates/writes/reads/changes a certain file.

And then, I would report via bugzilla.

If it is intentional, they will know.


Cheers / Saludos,

Carlos E. R.
(from 11.2 x86_64 “Emerald” at Telcontar)

  • thank you, particularly, Carlos

best regards

Try to find the string “,addy” in the kde4 config files:


grep \,addy ~/.kde4/share/config/*

maybe that will throw the name of a config file to you. Then you could fix that.

The vcf files, aren’t they Vcard files from some addressbook?

Yes they are vcard-files (although to my knowledge they are generated when you export a vcard for an appointment.

On 2010-10-23 00:06, Knurpht wrote:
>
> Try to find the string “,addy” in the kde4 config files:
>
> Code:
> --------------------
>
> grep ,addy ~/.kde4/share/config/*
>
> --------------------
>
> maybe that will throw the name of a config file to you. Then you could
> fix that.

And if it doesn’t find anything, then check the binaries, data, the etc dir… it should come out
somewhere.


Cheers / Saludos,

Carlos E. R.
(from 11.2 x86_64 “Emerald” at Telcontar)