LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Strange Problems With Firefox and Opera Browsers (https://www.linuxquestions.org/questions/linux-security-4/strange-problems-with-firefox-and-opera-browsers-699665/)

btbx 01-24-2009 06:04 PM
Strange Problems With Firefox and Opera Browsers
 
I had strange problems with 2 graphic browsers (Opera and Firefox) at the same time and I guess this problem is related to some sort of malware (virus, trojan, worm, rootkit) or something else.

1. When I start the browsers this morning, all my preferences setting (fonts, homepage, wand etc) are reset back to the default settings. It looks like the browsers are in similar condition as newly installed browser from rpm (I use mandriva).

2. The strange thing, the ".mozilla" and ".opera" directory are intact / still exist.

3. I had deleted both graphical browsers as prevention.

Is this some sort of malware?
If this is malware, what other programs are attacked?
Thank you.

amani 01-24-2009 06:11 PM
install rkhunter and check


Did some new rpm do it?

jhwilliams 01-24-2009 06:12 PM
Firefox user dirs are kept in .mozilla/firefox/randomstring.default and the active profile is specified in .mozilla/firefox/profiles.ini. Given that your profile is saved in .mozilla/firefox/yolzv1zl.default, make sure that you have something similar to the below in your profiles.ini:

Code:
StartWithLastProfile=1

[Profile0]
Name=default
IsRelative=1
Path=yolzv1zl.default
I am of the opinion that viruses don't actually really exist (on Linux) and that it was likely an inadvertant configuration change that lead to your woes.

Best of luck!

rweaver 01-26-2009 08:49 AM
Quote:
Originally Posted by btbx (Post 3420173)
I had strange problems with 2 graphic browsers (Opera and Firefox) at the same time and I guess this problem is related to some sort of malware (virus, trojan, worm, rootkit) or something else.
...<SNIP>...
Is this some sort of malware?
If this is malware, what other programs are attacked?
Thank you.
Possible but highly, highly unlikely. More likely a system update or a corrupted file or a drive that has some bad sectors. To be safe follow normal procedures to see if your system has been compromised (cert checklist is a good start), check your logs, etc.


All times are GMT -5. The time now is 05:00 PM.