My Linux (Ubuntu 12.04) password suddenly changed last night and I'm not sure if this is an attack or just a hardware/user error. This is on a personal/non-server box. Several strange events led up to it, enumerated below:
- While browsing web pages, I can't seem to scroll down. My right hand was on my mouse, left eating food so I'm sure I'm not accidentally pressing any keys. I ran
showkeyand discovered that every now and then, I'd get spammed by
keycode 104events. 104 seems to be Pg Up.
- Then it happened that I can't seem to get my password right when invoking sudo commands. However, I can get sudo to authenticate if I copy-paste my password.
- I got suspicious at this point and checked if there are any unwanted log-ins in my box.
whocommand returns as expected (i.e., only me and my open terminals) and sshd is not running nor can I access port 22 (via telnet).
- Eventually, I locked my screen and, when I returned, I was prompted for a password and I can't enter it properly anymore.
- My machine is dual-boot with Windows 8. I try to log-in to Windows 8 and, when I enter my password, I seem to notice that, when I enter my password (19 chars long, same as Ubuntu's), the cursor suddenly shifts to the first character. So, for instance, if my password is "password", entering it straight out it becomes "dpasswor". This got me a few times until I observed the behavior. It helps that Windows 8 allows you the option to see the password you type. You can still edit it though and log-in to Windows just fine.
This is not the first time that my keyboard glitched like this. Last year, it was the direction buttons that was spamming signals. What particularly bothers me is that I got locked out of my machine and that it seemed to change my password and introduce all that weird behavior.
I left it over night and woke up today to address the issue. Windows is no longer displaying the weird behavior of the last bullet. I have been able to reset my Linux password (to something shorter for the meantime).
who and telnet/ssh is same as ever and I no longer seem to observe the unwanted keypress 104 signals. Are there any further steps you advise me to take?