[TriLUG] Virus

[William Sutton via TriLUG]

ah, you're correct.  column 1 is the user the process is running as. 
column 2 is the PID, and column 3 is the parent process ID.

William Sutton

On Wed, 28 Feb 2018, Peter Neilson wrote:

> Shouldn't that be "awk '{print $2}' "  to get the PID???
> Or is my system just weird?
>
> On Wed, 28 Feb 2018 08:27:57 -0500, William Sutton via TriLUG 
> <trilug at trilug.org> wrote:
>
>> If running Windows, you should be able to use the task manager to find the 
>> browser and kill its process.
>> 
>> If running Linux, you should be able to open a terminal,
>> "ps -efwww |grep -i fire |grep -v grep |awk '{print $1}'" and kill the 
>> resultant PID.  May have to kill -9 the PID.
>> 
>> That saves rebooting.
>> 
>> William Sutton
>> 
>> On Wed, 28 Feb 2018, Brian Grawburg via TriLUG wrote:
>> 
>>> 
>>> I clicked on an innocent image on Facebook and up popped a porno picture 
>>> and warning that I needed to immediately contact tech support to get rid 
>>> of it. Of course I knew it was a scam but I had to reboot to close out 
>>> Mozilla. I scanned my system last night but I'm worried this might happen 
>>> again....I'd hate to be showing someone at work something on the Web here 
>>> at work and have this darn thing appear again. Where is this thing lurking 
>>> on my system?
>>> 
>>> Brian Grawburg
>>> Wilson, NC