LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 02-14-2007, 02:17 PM   #1
paul123
Member
 
Registered: Nov 2006
Location: UK
Distribution: Mandriva 2007
Posts: 93

Rep: Reputation: 15
Question Unexpected behaviour on PC. Gone now but worrying


Im running Mandriva 2007 as a home PC and im reasonably new to Linux, 3months etc. PC is Not mission critical. I am running the mandriva firewall and firestarter front end.

Out of the blue the otherday I was hit by unusual PC behaviour. Opened Mozilla and tried to go to google. Got immediately directed to a porn site and this was followed by a trashy pop up.

Shutdown browser and reopened. Tried to go to google and got a suspect google page saying they were refusing connection because I was appearing as a type of virus? It looked like a possible spoof webpage. Stupidly I never noted the address (too early in the morning). However try as I might I could not get past this page to google.

When I tried to shutdown my machine there was alot of hardrive activity that held up the logoff and shutdown.

Following day I fired up PC and firestarter GUI but my problems were gone.

Any ideas? Anything I could look for or check?
 
Old 02-14-2007, 02:52 PM   #2
Penguin of Wonder
Senior Member
 
Registered: Sep 2005
Location: West Virginia
Distribution: Gentoo
Posts: 1,249

Rep: Reputation: 45
There are virus scanners for Linux, have a look at ClamAV.
 
Old 02-14-2007, 03:35 PM   #3
rmakers
Member
 
Registered: Jan 2005
Location: Ann Arbor MI
Distribution: Mandriva 2006
Posts: 99

Rep: Reputation: 15
man in the middle

If you are on a wireless network it coul have been a man in the middle attack.
 
Old 02-15-2007, 03:09 AM   #4
Crito
Senior Member
 
Registered: Nov 2003
Location: Knoxville, TN
Distribution: Kubuntu 9.04
Posts: 1,168

Rep: Reputation: 53
Sounds like DNS cache poisoning to me.
http://en.wikipedia.org/wiki/DNS_cache_poisoning

On a Windows box I'd tell you to run:
Code:
ipconfig /flushdns
Not sure what the equivalent command is in Linux however. Maybe someone here can enlighten us both.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Unexpected shutdowns! fusee Linux - General 3 05-22-2006 07:48 AM
unexpected chmod behaviour ruzle0 Linux - Newbie 2 11-28-2005 02:06 PM
Patrick's Fine - Stop Worrying :) AxXium Slackware 19 06-17-2005 02:17 AM
Unexpected behaviour with the find command dazdaz Linux - General 3 12-15-2004 08:50 PM
Worrying email message from cron merlininthewood Linux - Security 5 11-08-2004 05:48 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:26 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration